Western Digital My Cloud Remote Code Execution Vulnerability
Release Date: 28 Mar 2022
RISK: Medium Risk
TYPE: Operating Systems - Cloud & Cluster
A vulnerability has been identified in Western Digital My Cloud. A remote user can exploit this vulnerability to trigger remote code execution on the targeted system.
Impact
- Remote Code Execution
System / Technologies affected
- Western Digital My Cloud PR2100 version prior to 5.21.104
- Western Digital My Cloud PR4100 version prior to 5.21.104
- Western Digital My Cloud EX4100 version prior to 5.21.104
- Western Digital My Cloud EX2 Ultra version prior to 5.21.104
- Western Digital My Cloud Mirror Gen 2 version prior to 5.21.104
- Western Digital My Cloud DL2100 version prior to 5.21.104
- Western Digital My Cloud DL4100 version prior to 5.21.104
- Western Digital My Cloud E2100 version prior to 5.21.104
- Western Digital My Cloud version prior to 5.21.104
- Western Digital WD Cloud version prior to 5.21.104
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
https://www.westerndigital.com/support/product-security/wdc-22006-my-cloud-os5-firmware-5-21-104
Vulnerability Identifier
Source
Related Link
https://www.westerndigital.com/support/product-security/wdc-22006-my-cloud-os5-firmware-5-21-104
沒有留言:
發佈留言