CVE-2021-35941: High severity western digital wd my book live firmware vulnerability
Published Jun 29, 2021
·Updated
Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an administrator API that can perform a system factory restore without authentication, as exploited in the wild in June 2021, a different vulnerability than CVE-2018-18472.
Affected Software
4 affected components
WesternDigital Wd My Book Live Firmware>=2.0
WesternDigital Wd My Book Live
WesternDigital Wd My Book Live Duo Firmware
WesternDigital Wd My Book Live Duo
Event History
Jun 29, 2021
CVE Published
via MITRE·08:22 PM
Data Sourced
via MITRE·08:22 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of Western Digital My Book Live and My Book Live Duo?
The vulnerability ID is CVE-2021-35941.
2
What is the severity rating of CVE-2021-35941?
The severity rating is high with a score of 7.5.
3
What is affected by CVE-2021-35941?
Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) are affected.
4
How can CVE-2021-35941 be exploited?
The vulnerability allows an attacker to perform a system factory restore without authentication.
5
Are there any recommended security measures for WD My Book Live and My Book Live Duo?
Yes, Western Digital has provided recommended security measures. Please refer to their official support page for more information.