CVE-2019-9950

CVSS V2 High 7.5 CVSS V3 Critical 9.8
Description
Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is affected by an authentication bypass vulnerability. The login_mgr.cgi file checks credentials against /etc/shadow. However, the "nobody" account (which can be used to access the control panel API as a low-privilege logged-in user) has a default empty password, allowing an attacker to modify the My Cloud EX2 Ultra web page source code and obtain access to the My Cloud as a non-Admin My Cloud device user.
Overview
  • CVE ID
  • CVE-2019-9950
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2019-04-24T18:29:01
  • Last Modified Date
  • 2020-08-24T17:37:01
Weakness Enumerations
CWE URL
CWE-521 http://cwe.mitre.org/data/definitions/521.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:westerndigital:my_cloud_firmware:*:*:*:*:*:*:*:* 1 OR 2.31.174
cpe:2.3:h:westerndigital:my_cloud:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:westerndigital:my_cloud_mirror_gen2_firmware:*:*:*:*:*:*:*:* 1 OR 2.31.174
cpe:2.3:h:westerndigital:my_cloud_mirror_gen2:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:westerndigital:my_cloud_ex2_ultra_firmware:*:*:*:*:*:*:*:* 1 OR 2.31.174
cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:westerndigital:my_cloud_ex2100_firmware:*:*:*:*:*:*:*:* 1 OR 2.31.174
cpe:2.3:h:westerndigital:my_cloud_ex2100:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:westerndigital:my_cloud_ex4100_firmware:*:*:*:*:*:*:*:* 1 OR 2.31.174
cpe:2.3:h:westerndigital:my_cloud_ex4100:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:westerndigital:my_cloud_dl2100_firmware:*:*:*:*:*:*:*:* 1 OR 2.31.174
cpe:2.3:h:westerndigital:my_cloud_dl2100:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:westerndigital:my_cloud_dl4100_firmware:*:*:*:*:*:*:*:* 1 OR 2.31.174
cpe:2.3:h:westerndigital:my_cloud_dl4100:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:westerndigital:my_cloud_pr2100_firmware:*:*:*:*:*:*:*:* 1 OR 2.31.174
cpe:2.3:h:westerndigital:my_cloud_pr2100:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:westerndigital:my_cloud_pr4100_firmware:*:*:*:*:*:*:*:* 1 OR 2.31.174
cpe:2.3:h:westerndigital:my_cloud_pr4100:-:*:*:*:*:*:*:* 0 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:P/I:P/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • PARTIAL
  • Base Score
  • 7.5
  • Severity
  • HIGH
  • Exploitability Score
  • 10
  • Impact Score
  • 6.4
CVSS Version 3
  • Version
  • 3.0
  • Vector String
  • CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • Attack Vector
  • NETWORK
  • Attack Compatibility
  • LOW
  • Privileges Required
  • NONE
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • HIGH
  • Availability Impact
  • HIGH
  • Base Score
  • 9.8
  • Base Severity
  • CRITICAL
  • Exploitability Score
  • 3.9
  • Impact Score
  • 5.9
References
Reference URL Reference Tags
https://support.wdc.com/downloads.aspx?g=2702&lang=en Vendor Advisory
https://community.wd.com/t/new-release-my-cloud-firmware-versions-2-31-174-3-26-19/235932 Vendor Advisory
https://github.com/bnbdr/wd-rce/
https://bnbdr.github.io/posts/wd/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2019-9950
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9950
History
Created Old Value New Value Data Type Notes
2022-05-10 17:18:51 Added to TrackCVE
2022-12-03 20:03:03 2019-04-24T18:29Z 2019-04-24T18:29:01 CVE Published Date updated
2022-12-03 20:03:03 2020-08-24T17:37:01 CVE Modified Date updated
2022-12-03 20:03:03 Modified Vulnerability Status updated