Security Advisory

CVE-2018-18472

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-06-19 15:44:20

Last updated 2024-08-05 11:08:21

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/language_configuration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the wild in June 2021 for factory reset commands,

← Browse all CVEs View on cve.org ↗