Critical severity · published Apr 24, 2019
CVE-2019-9951
Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100…
9.8
CVSS
1.7%
EPSS
No
On KEV
Description
Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is affected by an unauthenticated file upload vulnerability. The page web/jquery/uploader/uploadify.php can be accessed without any credentials, and allows uploading arbitrary files to any location on the attached storage.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
MY Cloud Dl2100 · Western Digital
before 2.31.174 · source: NVD
MC
MY Cloud Dl4100 Firmware · Western Digital
before 2.31.174 · source: NVD
MC
MY Cloud Ex2 Ultra Firmware · Western Digital
before 2.31.174 · source: NVD
MC
MY Cloud Ex2100 Firmware · Western Digital
before 2.31.174 · source: NVD
MC
MY Cloud Ex4100 · Western Digital
before 2.31.174 · source: NVD
MC
MY Cloud Firmware · Western Digital
before 2.31.174 · source: NVD
MC
MY Cloud Mirror Gen 2 Firmware · Western Digital
before 2.31.174 · source: NVD
MC
MY Cloud Pr2100 Firmware · Western Digital
before 2.31.174 · source: NVD
MC
MY Cloud Pr4100 · Western Digital
before 2.31.174 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-9951
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-9951
bnbdr.github.io
https://bnbdr.github.io/posts/wd/
Release Notes
https://community.wd.com/t/new-release-my-cloud-firmware-versions-2-31-174-3-26-19/235932
github.com
https://github.com/bnbdr/wd-rce/
Third Party Advisory
https://support.wdc.com/downloads.aspx?g=2702&lang=en
More from MY Cloud Dl2100
9.8
CVE-2018-17153
It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability