PT-2019-15721

CVE-2019-18929

Publicado

2019-11-13

Atualizado

2019-11-15

Descrição por

CVSS 2.0

9.0

Alta

MétricasAV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Western Digital My Cloud EX2 Ultra firmware version 2.31.183

Description The issue allows remote execution of arbitrary code via a stack-based buffer overflow in the download mgr.cgi. This can be exploited by web users, including those with guest accounts.

Recommendations For Western Digital My Cloud EX2 Ultra firmware version 2.31.183, consider disabling access to the download mgr.cgi until a patch is available. Restrict access to guest accounts to minimize the risk of exploitation.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Delspon

Jeong Jae Young

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-787: Out-of-bounds Write

Identificadores relacionados