CVE-2018-18472

Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...

CVE-2021-35941: Missing Authentication for Critical Function

Western Digital WD My Book Live 2.x and later and WD My Book Live Duo all versions have an administrator API that can perform a system factory restore without authentication, as exploited in the wild in June 2021, a different vulnerability than CVE-2018-18472...

PT-2021-3503

Name of the Vulnerable Software and Affected Versions Western Digital WD My Book Live versions 2.x and later Western Digital WD My Book Live Duo all versions Description The issue is related to deficiencies in the authentication procedure of Western Digital's WD My Book Live and WD My Book Live D...

CVE-2018-18472

The CVE-2018-18472 entry concerns Western Digital WD My Book Live and WD My Book Live Duo (all versions) that expose a root Remote Command Execution flaw via shell metacharacters in the /api/1.0/rest/language_configuration language parameter. The vulnerability can be triggered by any actor that k...

PT-2019-5873

Name of the Vulnerable Software and Affected Versions Western Digital WD My Book Live and WD My Book Live Duo all versions Description The issue is related to a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/language configuration language parameter. This can be...

CVE-2018-18472

Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...

CVE-2018-18472: Improper Neutralization of Special Elements used in an OS Command

Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...