ZDI-CAN-19860: ZDI-23-846: (Pwn2Own) Western Digital MyCloud PR4100 Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Western Digital MyCloud PR4100 NAS devices. Authentication is not required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19860?
The severity of ZDI-CAN-19860 is critical due to its potential to expose sensitive information without requiring authentication.
How do I fix ZDI-CAN-19860?
To fix ZDI-CAN-19860, update your Western Digital MyCloud PR4100 NAS device to the latest firmware version released by the vendor.
What type of attacks can exploit ZDI-CAN-19860?
ZDI-CAN-19860 can be exploited by remote attackers to disclose sensitive information stored on the affected NAS devices.
Are there any workarounds for ZDI-CAN-19860?
Currently, there are no effective workarounds available for ZDI-CAN-19860 other than applying the appropriate firmware update.
Which devices are affected by ZDI-CAN-19860?
The vulnerability ZDI-CAN-19860 specifically affects Western Digital MyCloud PR4100 NAS devices.