Skip to main content

Western Digital My Cloud Remote Code Execution Vulnerability

Release Date: 28 Mar 2022 2639 Views

RISK: Medium Risk

TYPE: Operating Systems - Cloud & Cluster

TYPE: Cloud & Cluster

A vulnerability has been identified in Western Digital My Cloud. A remote user can exploit this vulnerability to trigger remote code execution on the targeted system.


Impact

  • Remote Code Execution

System / Technologies affected

  • Western Digital My Cloud PR2100 version prior to 5.21.104
  • Western Digital My Cloud PR4100 version prior to 5.21.104
  • Western Digital My Cloud EX4100 version prior to 5.21.104
  • Western Digital My Cloud EX2 Ultra version prior to 5.21.104
  • Western Digital My Cloud Mirror Gen 2 version prior to 5.21.104
  • Western Digital My Cloud DL2100 version prior to 5.21.104
  • Western Digital My Cloud DL4100 version prior to 5.21.104
  • Western Digital My Cloud E2100 version prior to 5.21.104
  • Western Digital My Cloud version prior to 5.21.104
  • Western Digital WD Cloud version prior to 5.21.104

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

https://www.westerndigital.com/support/product-security/wdc-22006-my-cloud-os5-firmware-5-21-104


Vulnerability Identifier


Source


Related Link

https://www.westerndigital.com/support/product-security/wdc-22006-my-cloud-os5-firmware-5-21-104