CVE-2019-18931: Buffer Overflow

Published Nov 13, 2019

Updated

Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters.

Affected Software

2 affected components

Western Digital My Cloud EX2 Ultra firmware=2.31.195

Western Digital My Cloud EX2 Ultra

Event History

Nov 13, 2019

CVE Published

via MITRE·03:34 PM

Data Sourced

via MITRE·03:34 PM

Description

Frequently Asked Questions

What is CVE-2019-18931?

CVE-2019-18931 is a vulnerability found in Western Digital My Cloud EX2 Ultra firmware 2.31.195 that allows a buffer overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters.

How severe is CVE-2019-18931?

CVE-2019-18931 has a severity score of 8.8, which is considered critical.

How does CVE-2019-18931 affect Western Digital My Cloud EX2 Ultra firmware?

CVE-2019-18931 affects Western Digital My Cloud EX2 Ultra firmware version 2.31.195.

What is the Common Weakness Enumeration (CWE) for CVE-2019-18931?

The Common Weakness Enumeration (CWE) for CVE-2019-18931 is CWE-119 and CWE-120.

Are there any references available for CVE-2019-18931?

Yes, you can find references for CVE-2019-18931 at the following links: [link1](https://github.com/DelspoN/CVE/blob/master/CVE-2019-18931/description.txt) and [link2](https://github.com/DelspoN/CVE/tree/master/CVE-2019-18931).