CVE-2019-18930

2019-11-1315:47:08

mitre

www.cve.org

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.5%

JSON

Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a stack-based buffer overflow. There is no size verification logic in one of functions in libscheddl.so, and download_mgr.cgi makes it possible to enter large-sized f_idx inputs.