CVE-2016-10107 Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie header.
CriticalCVSS 9.8
EPSS 11.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| western digital mycloud nas | = 2.11.142 | No fix listed |
References
- 95201 vdb-entry
- www.stevencampbell.info exploit third-party-advisory