CVE-2019-9949

creationtimestamp| type| source ---|---|--- 2019-05-23 14:48:19+00:00| seen| https://t.me/cvemitreorg/181...

CVE-2019-9949

The CVE-2019-9949 entry affects Western Digital My Cloud devices (Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100, PR4100) prior to firmware 2.31.183. The vulnerability arises from the CGI tool cgi-bin/webfile_mgr.cgi, which allows arbitrary file writes by abusing symlinks via a ta...