ZDI-CAN-19746: ZDI-23-1053: Western Digital MyCloud PR4100 REST SDK Use of Potentially Dangerous Function Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of the Western Digital MyCloud PR4100 NAS device. Authentication is required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19746?
The severity of ZDI-CAN-19746 is critical due to its potential for remote code execution on the affected device.
How do I fix ZDI-CAN-19746?
To fix ZDI-CAN-19746, ensure that your Western Digital MyCloud PR4100 is updated to the latest firmware version provided by the manufacturer.
What type of attackers can exploit ZDI-CAN-19746?
ZDI-CAN-19746 can be exploited by network-adjacent attackers who have authenticated access to the device.
What are the risks associated with ZDI-CAN-19746?
The risks associated with ZDI-CAN-19746 include unauthorized access, data theft, and loss of control over the affected NAS device.
Is authentication required to exploit ZDI-CAN-19746?
Yes, authentication is required to exploit ZDI-CAN-19746 on the Western Digital MyCloud PR4100 NAS device.