Code injection

2020-04-1520:15:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.3%

Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages.

CPENameOperatorVersion
ibilt2.2.0
my_cloud_homelt2.2.0

CPE	Name	Operator	Version
	ibi	lt	2.2.0
	my_cloud_home	lt	2.2.0

References

support.wdc.com/downloads.aspx?g=907&lang=en

www.westerndigital.com/support/productsecurity/wdc-19012-my-cloud-home-and-ibi-portal-websites-clickjacking-vulnerability

www.westerndigital.com/support/productsecurity/wdc-19012-my-cloud-home-and-ibi-websites-2-2-0