CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
57.2%
Improper Neutralization of Special Elements used in an OS Command (โOS Command Injectionโ) vulnerabilityย that was caused by a command that read files from a privileged location and created a system command without sanitizing the read data. This command could be triggered by an attacker remotely to cause code execution and gain a reverse shellย in Western Digital My Cloud OS 5 devices.This issue affects My Cloud OS 5: before 5.26.119.
Vendor | Product | Version | CPE |
---|---|---|---|
westerndigital | my_cloud | - | cpe:2.3:h:westerndigital:my_cloud:-:*:*:*:*:*:*:* |
westerndigital | my_cloud_dl2100 | - | cpe:2.3:h:westerndigital:my_cloud_dl2100:-:*:*:*:*:*:*:* |
westerndigital | my_cloud_dl4100 | - | cpe:2.3:h:westerndigital:my_cloud_dl4100:-:*:*:*:*:*:*:* |
westerndigital | my_cloud_ex2_ultra | - | cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-:*:*:*:*:*:*:* |
westerndigital | my_cloud_ex2100 | - | cpe:2.3:h:westerndigital:my_cloud_ex2100:-:*:*:*:*:*:*:* |
westerndigital | my_cloud_ex4100 | - | cpe:2.3:h:westerndigital:my_cloud_ex4100:-:*:*:*:*:*:*:* |
westerndigital | my_cloud_mirror_g2 | - | cpe:2.3:h:westerndigital:my_cloud_mirror_g2:-:*:*:*:*:*:*:* |
westerndigital | my_cloud_pr2100 | - | cpe:2.3:h:westerndigital:my_cloud_pr2100:-:*:*:*:*:*:*:* |
westerndigital | my_cloud_pr4100 | - | cpe:2.3:h:westerndigital:my_cloud_pr4100:-:*:*:*:*:*:*:* |
westerndigital | wd_cloud | - | cpe:2.3:h:westerndigital:wd_cloud:-:*:*:*:*:*:*:* |
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
57.2%