Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Limited authentication bypass vulnerability on Western Digital My Cloud devices
Vulnerability Description
A limited authentication bypass vulnerability was discovered that could allow an attacker to achieve remote code execution and escalate privileges on the My Cloud devices. Addressed this vulnerability by changing access token validation logic and rewriting rule logic on PHP scripts.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Vulnerability Type
认证机制不恰当
Vulnerability Title
Western Digital My Cloud 授权问题漏洞
Vulnerability Description
Western Digital My Cloud是美国西部数据（Western Digital）公司的一款个人云存储设备。 Western Digital My Cloud OS 5存在安全漏洞，攻击者可利用该漏洞实现远程代码执行和升级权限。
CVSS Information
N/A
Vulnerability Type
N/A