ZDI-CAN-19861: ZDI-23-847: (Pwn2Own) Western Digital MyCloud PR4100 Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Western Digital MyCloud PR4100 NAS devices. Some user interaction is required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19861?
The severity of ZDI-CAN-19861 is considered significant due to its ability to allow remote attackers to bypass authentication on affected devices.
How do I fix ZDI-CAN-19861?
To mitigate ZDI-CAN-19861, ensure that your Western Digital MyCloud PR4100 NAS device is updated to the latest firmware version provided by the manufacturer.
What specific devices are affected by ZDI-CAN-19861?
ZDI-CAN-19861 specifically affects Western Digital MyCloud PR4100 NAS devices.
What type of vulnerability is ZDI-CAN-19861?
ZDI-CAN-19861 is an authentication bypass vulnerability that requires some user interaction for exploitation.
Can ZDI-CAN-19861 be exploited remotely?
Yes, ZDI-CAN-19861 can be exploited remotely by attackers if user interaction is provided.