CVE Catalog
CVE-2016-10107
CriticalSummary
A remote command injection vulnerability as root exists in Western Digital MyCloud NAS version 2.11.142 via a modified Cookie header on the index.php page.
Risk Assessment
An attacker could gain full access to the system, posing a serious threat to the security of the data stored on the device.
Recommendation
It is recommended to update the software to the latest version and to monitor and secure Cookie headers.
Original NVD description (English source)
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie header.