Skip to main content

WD My Cloud Multiple Vulnerabilities

Last Update Date: 10 Jan 2018 10:12 Release Date: 10 Jan 2018 3205 Views

RISK: High Risk

TYPE: Servers - Other Servers

TYPE: Other Servers

Multiple vulnerabilities have been identified in WD My Cloud, a remote attacker cloud exploit these vulnerabilities to perform cross-site scripting, remote code exectuion, trigger denial of service condition and get sensitive information from the targeted system.


Impact

  • Cross-Site Scripting
  • Denial of Service
  • Remote Code Execution
  • Information Disclosure

System / Technologies affected

  • My Cloud EX2
  • My Cloud EX4
  • My Cloud EX2100
  • My Cloud EX4100
  • My Cloud EX2 Ultra
  • My Cloud DL2100
  • My Cloud DL4100
  • My Cloud PR2100
  • My Cloud PR4100
  • My Cloud Mirror
  • My Cloud Mirror Gen 2

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

 

The vendor has issues a fix( v2.30.172)

 

please refer to this link for detail:

https://blog.westerndigital.com/western-digital-cloud-update/

 


Vulnerability Identifier

  • No CVE information is available

Source


Related Link