Vendor/product archive

western_digital / mycloud_nas CVEs

Beta · best-effort

2 CVEs tagged to western_digital / mycloud_nas — 2 Critical, 0 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to western_digital vendor archive

CVE-2016-10108

Published Jan 3, 2017

Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data.

CVSS 9.8 · Critical

evidence mentions: 2
Buzz score: 17.5

Vendor/product tagsBeta · best-effort

CVE-2016-10107

Published Jan 3, 2017

Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie header.

CVSS 9.8 · Critical

evidence mentions: 2
Buzz score: 17.5

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1