VendorsWestern Digitalmycloud_nasall versions
Vulnerabilities

Western Digital MyCloud NAS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2016-10108
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data.
Published 2017-01-03 · Modified
10.0EPSS 0.978
CVE-2016-10107
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie header.
Published 2017-01-03 · Modified
10.0EPSS 0.112