Vulnerability   
Search   
    Search 187964 CVE descriptions
and 85075 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.108930
Category:Web application abuses
Title:Western Digital My Cloud Multiple Products < 2.31.193 Multiple Vulnerabilities
Summary:Multiple Western Digital My Cloud products are prone to multiple vulnerabilities.
Description:Summary:
Multiple Western Digital My Cloud products are prone to multiple vulnerabilities.

Vulnerability Insight:
The following issues have been addressed:

- Addressed SACK Panic Vulnerabilities (CVE-2019-11477, CVE-2019-11478, CVE-2019-11479)

- Resolved Twonky directory traversal (CVE-2018-7171)

- Resolved BusyBox directory traversal (CVE-2011-5325)

- Addressed privilege escalation vulnerability

Affected Software/OS:
Western Digital My Cloud with firmware versions prior to 2.31.193.

Solution:
Update to firmware version 2.31.193 or later.

Note: Some My Cloud products are already end-of-life and doesn't receive any updates anymore.

CVSS Score:
7.8

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2018-7171
https://www.exploit-db.com/exploits/44350/
http://packetstormsecurity.com/files/146938/TwonkyMedia-Server-7.0.11-8.5-Directory-Traversal.html
https://github.com/mechanico/sharingIsCaring/blob/master/twonky.py
Common Vulnerability Exposure (CVE) ID: CVE-2011-5325
Bugtraq: 20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series (Google Search)
https://seclists.org/bugtraq/2019/Jun/14
http://seclists.org/fulldisclosure/2019/Jun/18
http://seclists.org/fulldisclosure/2020/Aug/20
http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html
https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html
http://www.openwall.com/lists/oss-security/2015/10/21/7
https://usn.ubuntu.com/3935-1/
CopyrightCopyright (C) 2020 Greenbone Networks GmbH

This is only one of 85075 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2020 E-Soft Inc. All rights reserved.