Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gvrx-2pqj-7jjm

Опубликовано: 06 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 1.9

Описание

A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices. An attacker would require exploitation of another vulnerability to raise their privileges in order to exploit this buffer overflow vulnerability.

This issue affects My Cloud Home and My Cloud Home Duo: through 9.4.0-191; ibi: through 9.4.0-191. 

A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices. An attacker would require exploitation of another vulnerability to raise their privileges in order to exploit this buffer overflow vulnerability.

This issue affects My Cloud Home and My Cloud Home Duo: through 9.4.0-191; ibi: through 9.4.0-191. 

EPSS

Процентиль: 53%
0.00304
Низкий

1.9 Low

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 1.9
nvd
больше 2 лет назад

A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices. An attacker would require exploitation of another vulnerability to raise their privileges in order to exploit this buffer overflow vulnerability. This issue affects My Cloud Home and My Cloud Home Duo: before 9.4.0-191; ibi: before 9.4.0-191. 

EPSS

Процентиль: 53%
0.00304
Низкий

1.9 Low

CVSS3

Дефекты

CWE-120