CVE-2019-9950

CVE-2019-9950 affects Western Digital My Cloud family (firmware prior to 2.31.174), including My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100, PR4100. The login_mgr.cgi authentication bypasses credentials by using the /etc/shadow check, where the default...