CVE-2025-30247: OS Command Injection
An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30247?
CVE-2025-30247 is a critical severity vulnerability that allows remote attackers to execute arbitrary system commands.
How do I fix CVE-2025-30247?
To fix CVE-2025-30247, users should update their Western Digital My Cloud firmware to version 5.31.108 or later.
What systems are affected by CVE-2025-30247?
CVE-2025-30247 affects Western Digital My Cloud NAS platforms running firmware versions prior to 5.31.108.
Who can exploit CVE-2025-30247?
CVE-2025-30247 can be exploited by remote attackers who can send specially crafted HTTP POST requests to the vulnerable device.
What actions can be taken to mitigate CVE-2025-30247 before patching?
To mitigate CVE-2025-30247, consider restricting external access to the device and monitoring for unusual activity.