CVE-2019-9949

🗓️ 23 May 2019 13:22:27Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 80 Views🌐 WEB

CVE-2019-9949 Western Digital My Cloud firmware 2.31.183 code execution vulnerabilit

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2019-9949	23 May 201914:48	–	circl
CNVD	Code Execution Vulnerability in Multiple Western Digital Products	23 May 201900:00	–	cnvd
Cvelist	CVE-2019-9949	23 May 201913:22	–	cvelist
EUVD	EUVD-2019-19303	7 Oct 202500:30	–	euvd
NVD	CVE-2019-9949	23 May 201914:29	–	nvd
OpenVAS	Western Digital My Cloud Multiple Products < 2.31.183 Multiple Vulnerabilities	2 Sep 202000:00	–	openvas
Prion	Command injection	23 May 201914:29	–	prion

NVD

Node

westerndigital my_cloud_firmwareRange<2.31.183

AND

westerndigital my_cloudMatch-

Node

westerndigital my_cloud_mirror_gen2_firmwareRange<2.31.183

AND

westerndigital my_cloud_mirror_gen2Match-

Node

westerndigital my_cloud_ex2_ultra_firmwareRange<2.31.183

AND

westerndigital my_cloud_ex2_ultraMatch-

Node

westerndigital my_cloud_ex2100_firmwareRange<2.31.183

AND

westerndigital my_cloud_ex2100Match-

Node

westerndigital my_cloud_ex4100_firmwareRange<2.31.183

AND

westerndigital my_cloud_ex4100Match-

Node

westerndigital my_cloud_dl2100_firmwareRange<2.31.183

AND

westerndigital my_cloud_dl2100Match-

Node

westerndigital my_cloud_dl4100_firmwareRange<2.31.183

AND

westerndigital my_cloud_dl4100Match-

Node

westerndigital my_cloud_pr2100_firmwareRange<2.31.183

AND

westerndigital my_cloud_pr2100Match-

Node

westerndigital my_cloud_pr4100_firmwareRange<2.31.183

AND

westerndigital my_cloud_pr4100Match-

Source	Link
community	www.community.wd.com/t/new-release-my-cloud-firmware-versions-2-31-183-05-20-2019/237717
bnbdr	www.bnbdr.github.io/posts/wd/
github	www.github.com/bnbdr/wd-rce/

Parameter	Position	Path	Description	CWE
name	request body	cgi-bin/webfile_mgr.cgi	Code execution via symlink abuse in cgi-bin/webfile_mgr.cgi by uploading a tar archive containing a symbolic link, followed by another archive that writes to the link using the cgi_untar command; the 'name' parameter passed to cgi_unzip is not sanitized, enabling arbitrary file writes as root from a low-privilege session.	CWE-59

21 Nov 2024 04:52Current

9.1High risk

Vulners AI Score9.1

CVSS 38.8

CVSS 29

EPSS0.01456

cve-2019-9949 western digital my cloud code execution firmware vulnerability security advisory