Security Advisory

CVE-2016-10108

9.8
CRITICAL

Vulnerability Description

Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data.
Published Date January 3, 2017
Official Source NIST NVD Advisory