Lucene search

K
zdiSam Thomas (@_s_n_t) of Pentest Ltd (@pentestltd)ZDI-23-851
HistoryJun 08, 2023 - 12:00 a.m.

(Pwn2Own) Western Digital MyCloud PR4100 RESTSDK Uncontrolled Resource Consumption Denial-of-Service Vulnerability

2023-06-0800:00:00
Sam Thomas (@_s_n_t) of Pentest Ltd (@pentestltd)
www.zerodayinitiative.com
14
vulnerability
denial-of-service
network-adjacent
western digital
mycloud pr4100
restsdk

EPSS

0.001

Percentile

43.5%

This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Western Digital MyCloud PR4100 NAS devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RESTSDK server. The issue results from uncontrolled resource consumption. An attacker can leverage this vulnerability to create a denial-of-service condition on the device.

EPSS

0.001

Percentile

43.5%

Related for ZDI-23-851