CVE-2019-9949

🗓️ 23 May 2019 14:29:08Reported by [email protected]Type

Western Digital My Cloud devices before firmware 2.31.183 are susceptible to code execution by abusing symlinks

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2019-9949	23 May 201914:48	–	circl
CNVD	Code Execution Vulnerability in Multiple Western Digital Products	23 May 201900:00	–	cnvd
CVE	CVE-2019-9949	23 May 201913:22	–	cve
Cvelist	CVE-2019-9949	23 May 201913:22	–	cvelist
EUVD	EUVD-2019-19303	7 Oct 202500:30	–	euvd
OpenVAS	Western Digital My Cloud Multiple Products < 2.31.183 Multiple Vulnerabilities	2 Sep 202000:00	–	openvas
OSV	CVE-2019-9949	23 May 201914:29	–	osv
Prion	Command injection	23 May 201914:29	–	prion

NVD

Node

westerndigital my_cloud_firmwareRange<2.31.183

AND

westerndigital my_cloudMatch-

Node

westerndigital my_cloud_mirror_gen2_firmwareRange<2.31.183

AND

westerndigital my_cloud_mirror_gen2Match-

Node

westerndigital my_cloud_ex2_ultra_firmwareRange<2.31.183

AND

westerndigital my_cloud_ex2_ultraMatch-

Node

westerndigital my_cloud_ex2100_firmwareRange<2.31.183

AND

westerndigital my_cloud_ex2100Match-

Node

westerndigital my_cloud_ex4100_firmwareRange<2.31.183

AND

westerndigital my_cloud_ex4100Match-

Node

westerndigital my_cloud_dl2100_firmwareRange<2.31.183

AND

westerndigital my_cloud_dl2100Match-

Node

westerndigital my_cloud_dl4100_firmwareRange<2.31.183

AND

westerndigital my_cloud_dl4100Match-

Node

westerndigital my_cloud_pr2100_firmwareRange<2.31.183

AND

westerndigital my_cloud_pr2100Match-

Node

westerndigital my_cloud_pr4100_firmwareRange<2.31.183

AND

westerndigital my_cloud_pr4100Match-

Source	Link
github	www.github.com/bnbdr/wd-rce/
bnbdr	www.bnbdr.github.io/posts/wd/
community	www.community.wd.com/t/new-release-my-cloud-firmware-versions-2-31-183-05-20-2019/237717

17 Jun 2026 02:44Current

9.1High risk

Vulners AI Score9.1

CVSS 38.8

CVSS 29

EPSS0.03052

CWE-59