Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2021-35941
HistoryJun 29, 2021 - 9:15 p.m.

CVE-2021-35941

2021-06-2921:15:00
CWE-306
[email protected]
web.nvd.nist.gov
32
In Wild
11
cve-2021-35941
western digital
my book live
my book live duo
unauthenticated access
system factory restore

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

48.2%

JSON

Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an administrator API that can perform a system factory restore without authentication, as exploited in the wild in June 2021, a different vulnerability than CVE-2018-18472.

Social References

More

Related

prion 2
threatpost 1
attackerkb 2
openvas 2
checkpoint_advisories 1
krebs 1
cve 1
prion
prion
Authentication flaw
2021-06-29 21:15:00
Design/Logic Flaw
2019-06-19 16:15:00
threatpost
threatpost
Zero-Day Used to Wipe My Book Live Devices
2021-06-30 16:08:46
attackerkb
attackerkb
CVE-2021-35941
2021-06-29 00:00:00
CVE-2018-18472
2019-06-19 00:00:00
openvas
openvas
Western Digital My Book Live End of Life (EOL) Detection
2021-07-02 00:00:00
Western Digital My Book Live / My Cloud NAS RCE Vulnerability
2018-11-13 00:00:00
checkpoint_advisories
checkpoint_advisories
Western Digital MyBook Live Remote Code Execution (CVE-2018-18472)
2018-11-11 00:00:00
krebs
krebs
MyBook Users Urged to Unplug Devices from Internet
2021-06-25 20:23:28
cve
cve
CVE-2018-18472
2019-06-19 16:15:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

48.2%

JSON
Related for CVE-2021-35941
prion2threatpost1attackerkb2openvas2checkpoint_advisories1krebs1cve1