2 ms·
Even worse it was a known CVE - the firmware update was in 2015. Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Comm
by tibbydudeza 5y ago
Even worse it was a known CVE - the firmware update was in 2015.
Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/language_configuration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the wild in June 2021 for factory reset commands.