Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2021-35941
HistoryJun 29, 2021 - 9:15 p.m.

CVE-2021-35941

2021-06-2921:15:07
CWE-306
mitre
web.nvd.nist.gov
44
In Wild
11
cve-2021-35941
western digital
my book live
my book live duo
unauthenticated access
system factory restore

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.4

Confidence

High

EPSS

0.081

Percentile

94.3%

JSON

Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an administrator API that can perform a system factory restore without authentication, as exploited in the wild in June 2021, a different vulnerability than CVE-2018-18472.

Affected configurations

Nvd
Node
westerndigitalwd_my_book_liveMatch-
AND
westerndigitalwd_my_book_live_firmwareRange2.0≥
Node
westerndigitalwd_my_book_live_duoMatch-
AND
westerndigitalwd_my_book_live_duo_firmware
VendorProductVersionCPE
westerndigitalwd_my_book_live-cpe:2.3:h:westerndigital:wd_my_book_live:-:*:*:*:*:*:*:*
westerndigitalwd_my_book_live_firmware*cpe:2.3:o:westerndigital:wd_my_book_live_firmware:*:*:*:*:*:*:*:*
westerndigitalwd_my_book_live_duo-cpe:2.3:h:westerndigital:wd_my_book_live_duo:-:*:*:*:*:*:*:*
westerndigitalwd_my_book_live_duo_firmware*cpe:2.3:o:westerndigital:wd_my_book_live_duo_firmware:*:*:*:*:*:*:*:*

Social References

More

Related

attackerkb 2
prion 2
cvelist 2
nvd 2
threatpost 1
openvas 2
checkpoint_advisories 1
krebs 1
cve 1
attackerkb
attackerkb
CVE-2021-35941
2021-06-29 00:00:00
CVE-2018-18472
2019-06-19 00:00:00
prion
prion
Authentication flaw
2021-06-29 21:15:00
Design/Logic Flaw
2019-06-19 16:15:00
cvelist
cvelist
CVE-2021-35941
2021-06-29 20:22:43
CVE-2018-18472
2019-06-19 15:44:20
nvd
nvd
CVE-2021-35941
2021-06-29 21:15:07
CVE-2018-18472
2019-06-19 16:15:10
threatpost
threatpost
Zero-Day Used to Wipe My Book Live Devices
2021-06-30 16:08:46
openvas
openvas
Western Digital My Book Live End of Life (EOL) Detection
2021-07-02 00:00:00
Western Digital My Book Live / My Cloud NAS RCE Vulnerability
2018-11-13 00:00:00
checkpoint_advisories
checkpoint_advisories
Western Digital MyBook Live Remote Code Execution (CVE-2018-18472)
2018-11-11 00:00:00
krebs
krebs
MyBook Users Urged to Unplug Devices from Internet
2021-06-25 20:23:28
cve
cve
CVE-2018-18472
2019-06-19 16:15:10

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.4

Confidence

High

EPSS

0.081

Percentile

94.3%

JSON
Related for CVE-2021-35941
attackerkb2prion2cvelist2nvd2threatpost1openvas2checkpoint_advisories1krebs1cve1