Western Digital

My Cloud Ex2 Ultra Firmware

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9

CVE-2019-18929

Exploit
  • EPSS 1%
  • Published 13.11.2019 16:15:11
  • Last modified 21.11.2024 04:33:51

Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mgr.cgi stack-based buffer overflow.

9

CVE-2019-18930

Exploit
  • EPSS 1%
  • Published 13.11.2019 16:15:11
  • Last modified 21.11.2024 04:33:51

Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a stack-based buffer overflow. There is no size verification logic in one of functions in libscheddl.so, and downlo...

9

CVE-2019-18931

Exploit
  • EPSS 0.51%
  • Published 13.11.2019 16:15:11
  • Last modified 21.11.2024 04:33:51

Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters.

9.8

CVE-2019-9951

  • EPSS 1.33%
  • Published 24.04.2019 18:29:01
  • Last modified 21.11.2024 04:52:39

Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is affected by an unauthenticated file upload vulnera...

10

CVE-2018-17153

Exploit
  • EPSS 91.65%
  • Published 18.09.2018 15:29:00
  • Last modified 21.11.2024 03:53:58

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a...