The vulnerability of Western Digital My Cloud NAS’ network storage software’s microprogramming system, related to the lack of measures taken to neutralize specific elements, allows a perpetrator to execute arbitrary codes.

🗓️ 01 Oct 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

WD My Cloud NAS microprogramming vulnerability enables remote code execution via crafted POST request.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-30247	30 Sep 202501:34	–	circl
CNNVD	Western Digital My Cloud 安全漏洞	29 Sep 202500:00	–	cnnvd
CVE	CVE-2025-30247	29 Sep 202521:07	–	cve
Cvelist	CVE-2025-30247	29 Sep 202521:07	–	cvelist
EUVD	EUVD-2025-31646	3 Oct 202520:07	–	euvd
NVD	CVE-2025-30247	29 Sep 202521:15	–	nvd
OpenVAS	Western Digital My Cloud Multiple Products 5.x < 5.31.108 OS Command Injection Vulnerability (WDC-25006)	30 Sep 202500:00	–	openvas
Positive Technologies	PT-2025-39899	26 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-30247	30 Sep 202521:31	–	redhatcve
The Hacker News	⚡ Weekly Recap: Oracle 0-Day, BitLocker Bypass, VMScape, WhatsApp Worm & More	6 Oct 202511:38	–	thn

Vulners

Node

western_digital my_cloud_pr2100Range<5.31.108

OR

western_digital my_cloud_pr4100Range<5.31.108

OR

western_digital my_cloud_ex4100Range<5.31.108

OR

western_digital my_cloud_ex2_ultraRange<5.31.108

OR

western_digital my_cloud_dl2100Range<5.31.108

OR

western_digital my_cloud_ex2100Range<5.31.108

OR

western_digital my_cloud_wdbctlxxxxxx-10Range<5.31.108

OR

western_digital my_cloudRange<5.31.108

Source	Link
westerndigital	www.westerndigital.com/support/product-security/wdc-25006-western-digital-my-cloud-os-5-firmware-5-31-108
web	www.web.nvd.nist.gov/view/vuln/detail

01 Oct 2025 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 39.8

CVSS 210

EPSS0.01117

western digital my cloud nas remote code execution crafted request microprogramming vulnerability network storage software