Western Digital Mycloud Nas vulnerabilities
2 known vulnerabilities affecting western_digital/mycloud_nas.
Total CVEs
2
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL2
Vulnerabilities
Page 1 of 1
CVE-2016-10108P1CRITICALCVSS 9.8ExploitedPoCv2.11.1422017-01-03
CVE-2016-10108 [CRITICAL] CWE-77 CVE-2016-10108: Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data.
nvd
CVE-2016-10107P2CRITICALCVSS 9.8v2.11.1422017-01-03
CVE-2016-10107 [CRITICAL] CWE-77 CVE-2016-10107: Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie header.
nvd