Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Western Digital My Cloud OS 5 devices Command Injection Vulnerability
Vulnerability Description
A command injection vulnerability in the DDNS service configuration of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to execute code in the context of the root user.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Western Digital My Cloud 操作系统命令注入漏洞
Vulnerability Description
Western Digital My Cloud是美国西部数据（Western Digital）公司的一款个人云存储设备。 Western Digital My Cloud OS5 5.26.119之前版本存在安全漏洞，该漏洞源于DDNS服务配置中存在命令注入漏洞，允许攻击者在root用户的上下文中执行代码。
CVSS Information
N/A
Vulnerability Type
N/A