Description
An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Western Digital | My Cloud | < 5.31.108 | 5.31.108 |