CVE-2016-10108 Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data.
CriticalCVSS 9.8
EPSS 97.8%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| western digital mycloud nas | = 2.11.142 | No fix listed |
References
- packetstormsecurity.com
- 95200 vdb-entry
- www.stevencampbell.info exploit third-party-advisory