Security Advisory
CVE-2016-10107
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie header.