CVE-2018-9148 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2018-9148

Analyzed

More Info Official Page

Source-cve@mitre.org

Published At-30 Mar, 2018 | 19:29

Updated At-28 May, 2019 | 15:07

Western Digital WD My Cloud v04.05.00-320 devices embed the session token (aka PHPSESSID) in filenames, which makes it easier for attackers to bypass authentication by listing a directory. NOTE: this can be exploited in conjunction with CVE-2018-7171 for remote authentication bypass within a product that uses My Cloud.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 3.0

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

Western Digital Corp.

>>my_cloud_firmware>>04.05.00-320

cpe:2.3:o:westerndigital:my_cloud_firmware:04.05.00-320:*:*:*:*:*:*:*

Western Digital Corp.

cpe:2.3:h:westerndigital:my_cloud:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-287	Primary	nvd@nist.gov

CWE ID: CWE-287

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://exploit-db.com/exploits/44350/	cve@mitre.org	Exploit Third Party Advisory VDB Entry

Hyperlink: https://exploit-db.com/exploits/44350/

Source: cve@mitre.org

Resource:

Exploit

Third Party Advisory

VDB Entry