High severity · published Nov 13, 2019
CVE-2019-18929
Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mgr.cgi stack-based buffer…
8.8
CVSS
2.9%
EPSS
No
On KEV
Description
Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mgr.cgi stack-based buffer overflow.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
MY Cloud Ex2 Ultra Firmware · Western Digital
2.31.195 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-18929
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-18929
Third Party Advisory
https://github.com/DelspoN/CVE/blob/master/CVE-2019-18929/description.txt
Exploit
https://github.com/DelspoN/CVE/tree/master/CVE-2019-18929
More from MY Cloud Ex2 Ultra Firmware
9.8
CVE-2019-9951
Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100…
9.8
CVE-2018-17153
It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability
8.8
CVE-2019-18931
Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters
8.8
CVE-2019-18930
Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a stack-based buffer overflow