Western Digital Vulnerabilities and Affected Products
Vulnerabilities associated with my_cloud_pr4100_firmware.
Products
Clear product- My Cloud14 vulnerabilities
- My Cloud OS 512 vulnerabilities
- My Cloud Home6 vulnerabilities
- My Cloud Home and My Cloud Home Duo6 vulnerabilities
- Sweet B Library4 vulnerabilities
- WD Discovery3 vulnerabilities
- My Cloud Home & Duo2 vulnerabilities
- My Cloud Home Web App2 vulnerabilities
- EdgeRover1 vulnerability
- My Cloud Home Duo1 vulnerability
- My Cloud Home Mobile App1 vulnerability
- My Cloud OS 5 Mobile App1 vulnerability
- My Cloud OS 5 Web App1 vulnerability
- My Cloud web app1 vulnerability
- my_book_live_firmware1 vulnerability
- my_cloud_pr4100_firmware1 vulnerability
- mycloud_nas1 vulnerability
- TV Live Hub1 vulnerability
- TV Media Player1 vulnerability
- WD Cloud web app1 vulnerability
- wd_my_book_live_firmware1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2017-17560CRITICAL | Western Digital my_cloud_pr4100_firmware Improper AuthenticationAn issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jquery/uploader/multi_uploadify.php, provides multipart upload functionality that is accessible without authentication and can be used to place a file anywhere on the device's file system. This allows an attacker the ability to upload a PHP shell onto the device and obtain arbitrary code execution as root. CWE-287Dec 12, 2017 | CVSS9.8v3.0 | EPSS73.4% | PoCs2 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |