VulnerabilityModified

CVE-2019-9951

CRITICAL 9.8EPSS 1.68%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.68%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is affected by an unauthenticated file upload vulnerability. The page web/jquery/uploader/uploadify.php can be accessed without any credentials, and allows uploading arbitrary files to any location on the attached storage.

CVSS 3.0: 9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.68% probability · 76th percentile
CISA KEV: Not listed
Weakness: CWE-434
Affected: western digital/my cloud mirror gen 2 firmware · western digital/my cloud ex2 ultra firmware · western digital/my cloud ex2100 firmware · western digital/my cloud ex4100 · western digital/my cloud dl2100 · western digital/my cloud dl4100 firmware · western digital/my cloud pr2100 firmware · western digital/my cloud pr4100 · western digital/my cloud firmware
Source: cve@mitre.org

References

https://bnbdr.github.io/posts/wd/
https://community.wd.com/t/new-release-my-cloud-firmware-versions-2-31-174-3-26-19/235932Release Notes, Third Party Advisory
https://github.com/bnbdr/wd-rce/
https://support.wdc.com/downloads.aspx?g=2702&lang=enThird Party Advisory
https://bnbdr.github.io/posts/wd/
https://community.wd.com/t/new-release-my-cloud-firmware-versions-2-31-174-3-26-19/235932Release Notes, Third Party Advisory
https://github.com/bnbdr/wd-rce/
https://support.wdc.com/downloads.aspx?g=2702&lang=enThird Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.