CVE-2021-36225

Publication date

2023-02-06 00:00:00

Family

mitre

State

PUBLISHED

Description

Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API commands for firmware uploads and installation.