Filtered by vendor Westerndigital Subscriptions
Filtered by product My Book Live Firmware Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-18472 1 Westerndigital 2 My Book Live, My Book Live Firmware 2024-11-21 N/A
Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/language_configuration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the wild in June 2021 for factory reset commands,