Unscored CVE-2019-18929 EUVD-2019-8602GHSA-5hhg-c67q-pxx6

Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a d…

Published Nov 13, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mgr.cgi stack-based buffer overflow.

References

https://github.com/DelspoN/CVE/blob/master/CVE-2019-18929/description.txt
https://github.com/DelspoN/CVE/tree/master/CVE-2019-18929