Posted by SEC Consult Vulnerability Lab on Mar 07

SEC Consult Vulnerability Lab Security Advisory < 20170307-0 >
=======================================================================
title: Unauthenticated OS command injection & arbitrary file upload
product: Western Digital My Cloud
vulnerable version: at least: 2.21.126 (My Cloud), 2.11.157(My Cloud EX2),
2.21.126 (My Cloud EX2 Ultra), 2.11.157 (My Cloud EX4),…

Posted by Securify B.V. on Mar 07

————————————————————————
Western Digital My Cloud vulnerable to Cross-Site Request Forgery
vulnerability
————————————————————————
Remco Vermeulen, January 2017

————————————————————————
Abstract
————————————————————————
It was discovered that the Western…

Posted by Securify B.V. on Mar 07

————————————————————————
Stack-based buffer overflow in Western Digital My Cloud allows for
remote code execution
————————————————————————
Remco Vermeulen, January 2017

————————————————————————
Abstract
————————————————————————
It was discovered that the…

Posted by Securify B.V. on Mar 07

————————————————————————
Western Digital My Cloud vulnerable to multiple command injection
vulnerabilities
————————————————————————
Remco Vermeulen, January 2017

————————————————————————
Abstract
————————————————————————
It was discovered that the Western…