critical9.3
CVE-2025-30247
An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to exec…
Impact
An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Western Digital | Western Digital My Cloud Firmware | before 5.31.108 |
Versions were read from the advisory text. No structured product data has been published for this record yet.