critical9.8Public exploit code
CVE-2017-17560
An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Western Digital MyCloud - 'multi_uploadify' File Upload (Metasploit)2017-12-18 · remote · php · Verified
Impact
An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jquery/uploader/multi_uploadify.php, provides multipart upload functionality that is accessible without authentication and can be used to place a file anywhere on the device's file system. This allows an attacker the ability to upload a PHP shell onto the device and obtain arbitrary code execution as root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Westerndigital | My Cloud Pr4100 Firmware | Version 2.30.172 |
Weakness classification
References
- NVD record
- CVE.org record
- https://download.exploitee.rs/file/generic/Exploiteers-DEFCON25.pdf
- https://github.com/rapid7/metasploit-framework/pull/9248
- https://www.exploit-db.com/exploits/43356/
- https://download.exploitee.rs/file/generic/Exploiteers-DEFCON25.pdf
- https://github.com/rapid7/metasploit-framework/pull/9248
- https://www.exploit-db.com/exploits/43356/