Lucene search

[email protected]CVE-2019-9951

HistoryApr 24, 2019 - 6:29 p.m.

CVE-2019-9951

2019-04-2418:29:01

CWE-434

[email protected]

web.nvd.nist.gov

western digital

my cloud

firmware

vulnerability

unauthenticated

file upload

nvd

cve-2019-9951

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.9%

JSON

Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is affected by an unauthenticated file upload vulnerability. The page web/jquery/uploader/uploadify.php can be accessed without any credentials, and allows uploading arbitrary files to any location on the attached storage.

Affected configurations

NVD

Node

western_digitalmy_cloud_mirror_gen_2_firmwareRange<2.31.174

AND

western_digitalmy_cloud_mirror_gen_2Match-

Node

western_digitalmy_cloud_ex2_ultra_firmwareRange<2.31.174

AND

western_digitalmy_cloud_ex2_ultraMatch-

Node

western_digitalmy_cloud_ex2100_firmwareRange<2.31.174

AND

western_digitalmy_cloud_ex2100Match-

Node

western_digitalmy_cloud_ex4100Range<2.31.174

AND

western_digitalmy_cloud_ex4100Match-

Node

western_digitalmy_cloud_dl2100Range<2.31.174

AND

western_digitalmy_cloud_dl2100Match-

Node

western_digitalmy_cloud_dl4100_firmwareRange<2.31.174

AND

western_digitalmy_cloud_dl4100Match-

Node

western_digitalmy_cloud_pr2100_firmwareRange<2.31.174

AND

western_digitalmy_cloud_pr2100Match-

Node

western_digitalmy_cloud_pr4100Range<2.31.174

AND

western_digitalmy_cloud_pr4100Match-

Node

western_digitalmy_cloud_firmwareRange<2.31.174

AND

western_digitalmy_cloudMatch-

CPENameOperatorVersion
western_digital:my_cloud_mirror_gen_2_firmwarewestern digital my cloud mirror gen 2 firmwarelt2.31.174

CPE	Name	Operator	Version
western_digital:my_cloud_mirror_gen_2_firmware	western digital my cloud mirror gen 2 firmware	lt	2.31.174

References

bnbdr.github.io/posts/wd/

community.wd.com/t/new-release-my-cloud-firmware-versions-2-31-174-3-26-19/235932

github.com/bnbdr/wd-rce/

support.wdc.com/downloads.aspx?g=2702&lang=en

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.9%

JSON

Related for CVE-2019-9951

openvas2 cvelist1 prion1 nvd1