ZDI-23-846: (Pwn2Own) Western Digital MyCloud PR4100 Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Western Digital MyCloud PR4100 NAS devices. Authentication is not required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-846?
The vulnerability ZDI-23-846 is classified as a serious security risk due to the potential for sensitive information disclosure without authentication.
How do I fix ZDI-23-846?
To fix ZDI-23-846, users should apply the latest firmware updates provided by Western Digital for the MyCloud PR4100 NAS devices.
What type of information can be disclosed due to ZDI-23-846?
ZDI-23-846 can lead to the exposure of sensitive configuration and user information stored on the affected devices.
Is authentication required to exploit ZDI-23-846?
No, authentication is not required to exploit the vulnerability identified as ZDI-23-846.
Which devices are affected by ZDI-23-846?
The vulnerability ZDI-23-846 specifically affects the Western Digital MyCloud PR4100 NAS devices.