#VU54524 Missing authentication for critical function in My Cloud PR4100

Vulnerability identifier: #VU54524

Vulnerability risk: High

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: N/A

CWE-ID: CWE-306

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
My Cloud PR4100
Hardware solutions / Other hardware appliances

Vendor: Western Digital

Description

The vulnerability allows a remote attacker to compromise the affected device.

The vulnerability exists due to an error in the configuration when accessing the management API along with an empty password for the "nobody" user account. A remote non-authenticated attacker can login  under the "nobody" user account with an empty password to the administrative interface and upload an arbitrary OS image onto the device.

Successful exploitation of the vulnerability may allow an attacker to compromise the affected system.

Mitigation
Upgrade your firmware to My Cloud OS 5.

Vulnerable software versions

My Cloud PR4100: 2.20.202 - 2.41.116

---

External links
https://www.youtube.com/watch?v=vsg9YgvGBec

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.