ZDI-23-851: (Pwn2Own) Western Digital MyCloud PR4100 RESTSDK Uncontrolled Resource Consumption Denial-of-Service Vulnerability
Published Jun 8, 2023
·Updated
This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Western Digital MyCloud PR4100 NAS devices. Authentication is not required to exploit this vulnerability.
Affected Software
1 affected component
Western Digital MyCloud PR4100
Event History
Jun 8, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-23-851?
The severity of ZDI-23-851 is considered high due to its potential for enabling denial-of-service conditions.
2
How do I fix ZDI-23-851?
Fixing ZDI-23-851 involves applying the latest security patches provided by Western Digital for the MyCloud PR4100 device.
3
Who is affected by ZDI-23-851?
ZDI-23-851 affects installations of Western Digital MyCloud PR4100 NAS devices that are network-adjacent.
4
Is authentication required to exploit ZDI-23-851?
No, authentication is not required to exploit ZDI-23-851.
5
What type of attack is associated with ZDI-23-851?
ZDI-23-851 is associated with denial-of-service attacks.