Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Limited Server-Side Request Forgery vulnerability on Western Digital My Cloud devices.
Vulnerability Description
A limited SSRF vulnerability was discovered on Western Digital My Cloud devices that could allow an attacker to impersonate a server and reach any page on the server by bypassing access controls. The vulnerability was addressed by creating a whitelist for valid parameters.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Vulnerability Type
服务端请求伪造(SSRF)
Vulnerability Title
Western Digital My Cloud 代码问题漏洞
Vulnerability Description
Western Digital My Cloud是美国西部数据（Western Digital）公司的一款个人云存储设备。 Western Digital My Cloud 存在安全漏洞，该漏洞可能允许攻击者冒充服务器并通过绕过访问控制访问服务器上的任何页面。
CVSS Information
N/A
Vulnerability Type
N/A