RULE(RULE ID:336534)

Rule General Information
Release Date: 2022-04-20
Rule Name: Western Digital My Cloud Pro Series PR2100 Remote Code Execution Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Western Digital My Cloud Pro series PR2100 has a remote code execution vulnerability. This vulnerability allows a logged-in user with low privileges to execute arbitrary commands using the f_user parameter of the /home_mgr.cgi method.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.