CVE-2016-10108

Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data.

CVSS v3 9.8 CRITICAL
CVSS v2.0 10.0 HIGH

9.8^/10

CVSS v3 : CRITICAL

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://packetstormsecurity.com/files/173802/Western-Digital-MyCloud-Unauthenticated-Command-Injection.html
http://www.securityfocus.com/bid/95200
https://www.stevencampbell.info/2016/12/command-injection-in-western-digital-mycloud-nas/	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:western_digital:mycloud_nas:2.11.142:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-01-03 06:59

Updated : 2023-07-28 16:15

NVD link : CVE-2016-10108

Mitre link : CVE-2016-10108

CVE.ORG link : CVE-2016-10108

JSON object : View

Products Affected

western_digital

mycloud_nas

CWE

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

{"id": "CVE-2016-10108", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2017-01-03T06:59:00.230", "references": [{"url": "http://packetstormsecurity.com/files/173802/Western-Digital-MyCloud-Unauthenticated-Command-Injection.html", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/95200", "source": "cve@mitre.org"}, {"url": "https://www.stevencampbell.info/2016/12/command-injection-in-western-digital-mycloud-nas/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data."}, {"lang": "es", "value": "Inyecci\u00f3n de comandos remotos no autenticados como root ocurre en la URL /web/google_analytics.php de Western Digital MyCloud NAS 2.11.142 a trav\u00e9s de un par\u00e1metro arg modificado en el dato POST."}], "lastModified": "2023-07-28T16:15:09.663", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:western_digital:mycloud_nas:2.11.142:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E266118-1758-4B64-A160-42FFD3869274"}], "operator": "OR"}]}], "vendorComments": [{"comment": "This was resolved via My Cloud product firmware update 2.11.157 for the My Cloud EX2, EX4, and Mirror (Gen 1) models, and My Cloud product firmware update 2.21.126 for all other affected My Cloud models (My Cloud, PR 4100, PR2100, DL4100, DL2100, EX4100, EX2100, EX2 Ultra models). The firmware updates were made available December 20, 2016. The product firmware updates are available through the Update Firmware option on the My Cloud device itself or from the specific My Cloud product model\u2019s support page at: http://support.wdc.com/downloads.aspx?g=904&lang=en#downloads .", "lastModified": "2017-01-09T12:14:57.650", "organization": "Western Digital"}], "sourceIdentifier": "cve@mitre.org"}