Western Digital Vulnerabilities and Affected Products
Vulnerabilities associated with mycloud_nas.
Products
Clear product- My Cloud14 vulnerabilities
- My Cloud OS 512 vulnerabilities
- My Cloud Home6 vulnerabilities
- My Cloud Home and My Cloud Home Duo6 vulnerabilities
- Sweet B Library4 vulnerabilities
- WD Discovery3 vulnerabilities
- My Cloud Home & Duo2 vulnerabilities
- My Cloud Home Web App2 vulnerabilities
- EdgeRover1 vulnerability
- My Cloud Home Duo1 vulnerability
- My Cloud Home Mobile App1 vulnerability
- My Cloud OS 5 Mobile App1 vulnerability
- My Cloud OS 5 Web App1 vulnerability
- My Cloud web app1 vulnerability
- my_book_live_firmware1 vulnerability
- my_cloud_pr4100_firmware1 vulnerability
- mycloud_nas1 vulnerability
- TV Live Hub1 vulnerability
- TV Media Player1 vulnerability
- WD Cloud web app1 vulnerability
- wd_my_book_live_firmware1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2016-10108CRITICAL | Western Digital mycloud_nas Improper Neutralization of Special Elements used in a Command ('Command Injection')Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data. | CVSS9.8v3.0 | EPSS96.5% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |