CVE-2018-17153

🗓️ 18 Sep 2018 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 107 Views🌐 WEB

Auth bypass vulnerability on Western Digital My Cloud device before 2.30.196 allows unauthenticated admin access

Reporter	Title	Published	Views	Family All 19
zdt	WesternDigital #MyCloud Authentication Bypass Vulnerability	19 Sep 201800:00	–	zdt
zdt	Western Digital MyCloud Unauthenticated Command Injection Exploit	1 Aug 202300:00	–	zdt
Circl	CVE-2018-17153	19 Sep 201811:34	–	circl
CNVD	Western Digital My Cloud Authentication Bypass Vulnerability	19 Sep 201800:00	–	cnvd
Cvelist	CVE-2018-17153	18 Sep 201800:00	–	cvelist
Metasploit	Western Digital MyCloud unauthenticated command injection	14 Dec 201600:00	–	metasploit
Nuclei	Western Digital MyCloud NAS - Authentication Bypass	25 Sep 202602:05	–	nuclei
NVD	CVE-2018-17153	18 Sep 201815:29	–	nvd
OpenVAS	Western Digital My Cloud Products Authentication Bypass and Remote Command Injection Vulnerability	30 Nov 201700:00	–	openvas
OpenVAS	Western Digital My Cloud Multiple Products < 2.11.178 / 2.20 - 2.30 < 2.30.196 Authentication Bypass Vulnerability	2 Sep 202000:00	–	openvas

NVD

Node

AND

western_digital my_cloud_wdbctl0020hwt_firmwareRange<2.30.196

western_digital my_cloud_wdbctl0020hwt

Node

AND

western_digital my_cloud_pr4100Range<2.30.196

western_digital my_cloud_pr4100Match-

Node

AND

western_digital my_cloud_pr2100_firmwareRange<2.30.196

western_digital my_cloud_pr2100Match-

Node

AND

western_digital my_cloud_mirror_gen_2_firmwareRange<2.30.196

western_digital my_cloud_mirror_gen_2Match-

Node

AND

western_digital my_cloud_mirror_firmwareRange<2.30.196

western_digital my_cloud_mirrorMatch-

Node

AND

western_digital my_cloud_ex4100Range<2.30.196

western_digital my_cloud_ex4100Match-

Node

AND

western_digital my_cloud_ex4_firmwareRange<2.30.196

western_digital my_cloud_ex4Match-

Node

AND

western_digital my_cloud_ex2100_firmwareRange<2.30.196

western_digital my_cloud_ex2100Match-

Node

AND

western_digital my_cloud_ex2_ultra_firmwareRange<2.30.196

western_digital my_cloud_ex2_ultraMatch-

Node

AND

western_digital my_cloud_ex2_firmwareRange<2.30.196

western_digital my_cloud_ex2Match-

Node

AND

western_digital my_cloud_dl4100_firmwareRange<2.30.196

western_digital my_cloud_dl4100Match-

Node

AND

western_digital my_cloud_dl2100Range<2.30.196

western_digital my_cloud_dl2100Match-

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/173802/Western-Digital-MyCloud-Unauthenticated-Command-Injection.html
securityfocus	www.securityfocus.com/bid/105359
securify	www.securify.nl/nl/advisory/SFY20180102/authentication-bypass-vulnerability-in-western-digital-my-cloud-allows-escalation-to-admin-privileges.html
support	www.support.wdc.com/knowledgebase/answer.aspx

Parameter	Position	Path	Description	CWE
cmd	query param	/cgi-bin/network_mgr.cgi	Authentication bypass via cgi_get_ipv6 (flag=1) that creates an admin session bound to the IP, enabling access to admin CGI modules.	CWE-287
flag	query param	/cgi-bin/network_mgr.cgi	Authentication bypass via cgi_get_ipv6 (flag=1) that creates an admin session bound to the IP, enabling access to admin CGI modules.	CWE-287
cmd	request body	/web/google_analytics.php	Command injection in POST data via the arg parameter (uses '0\|echo ...') to execute arbitrary commands.	CWE-287
opt	request body	/web/google_analytics.php	Command injection in POST data via the arg parameter (uses '0\|echo ...') to execute arbitrary commands.	CWE-287
arg	request body	/web/google_analytics.php	Command injection in POST data via the arg parameter (uses '0\|echo ...') to execute arbitrary commands.	CWE-287

17 Jun 2026 01:45Current

9.7Critical risk

Vulners AI Score9.7

CVSS 39.8

CVSS 210

EPSS0.86586

CWE-287