cbcvebase.

Westerndigital Arkeia Virtual Appliance Firmware vulnerabilities

1 known vulnerability affecting westerndigital/arkeia_virtual_appliance_firmware.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2014-2846P3HIGHCVSS 7.5PoC≤ 10.2.72014-04-28
CVE-2014-2846 [HIGH] CWE-22 CVE-2014-2846: Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual applia Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual appliance (AVA) with firmware before 10.2.9 allows remote attackers to read arbitrary files and execute arbitrary PHP code via a ..././ (dot dot dot slash dot slash) in the lang Cookie parameter, as demonstrated by a request to login/doLogin.
nvd
Westerndigital Arkeia Virtual Appliance Firmware vulnerabilities | cvebase