{"vulnerability": "cve-2018-17153", "sightings": [{"uuid": "75207f52-2fae-417f-af78-c6d7f2a914fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17153", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "3b9cc6d2-c5b0-42e4-87f0-1bc4e9d5e8dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17153", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:05.000000Z"}, {"uuid": "d3a851fb-3d77-4a8f-a315-6cf2848ab3d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17153", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:58.000000Z"}, {"uuid": "c3c8a839-b3f5-44f9-b312-eea142e2c36e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17153", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/wd_mycloud_unauthenticated_cmd_injection.rb", "content": "", "creation_timestamp": "2023-07-28T13:22:17.000000Z"}, {"uuid": "5ae6a950-9ec4-45b5-9ab0-3f413c1a494c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17153", "type": "seen", "source": "https://t.me/BleepingComputer/3761", "content": "Western Digital Releases Hotfix for My Cloud Auth Bypass Vulnerability\n\nWestern Digital has just released an hotfix firmware update to resolve the\u00a0authentication bypass vulnerability (CVE-2018-17153) that had remained unpatched for over a year. This vulnerability allowed anyone to bypass authentication and get administrative access to the router. [...]\n\nhttps://www.bleepingcomputer.com/news/security/western-digital-releases-hotfix-for-my-cloud-auth-bypass-vulnerability/", "creation_timestamp": "2018-09-21T23:44:48.000000Z"}, {"uuid": "1982b86b-65a6-4a0d-a0ce-683a0c9fd0a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17153", "type": "seen", "source": "https://t.me/SecLabNews/3183", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Securify \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2018-17153) \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 Western Digital My Cloud, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u044d\u043a\u0441\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043a \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044e. \u0417\u0430\u0442\u0435\u043c \u043e\u043d\u0438 \u0441\u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0438\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0435\u0441\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438 \u043f\u0430\u043f\u043a\u0438.    \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WD My Cloud \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0443 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430", "creation_timestamp": "2018-09-19T11:34:43.000000Z"}, {"uuid": "312b4b2a-5383-42ac-bb2e-092f63173611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-17153", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/wd_mycloud_unauthenticated_cmd_injection.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, armle\", \"author\": [\"Erik Wynter\", \"Steven Campbell\", \"Remco Vermeulen\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits authentication bypass (CVE-2018-17153) and\\n          command injection (CVE-2016-10108) vulnerabilities in Western\\n          Digital MyCloud before 2.30.196 in order to achieve\\n          unauthenticated remote code execution as the root user.\\n\\n          The module first performs a check to see if the target is\\n          WD MyCloud. If so, it attempts to trigger an authentication\\n          bypass (CVE-2018-17153) via a crafted GET request to\\n          /cgi-bin/network_mgr.cgi. If the server responds as expected,\\n          the module assesses the vulnerability status by attempting to\\n          exploit a commend injection vulnerability (CVE-2016-10108) in\\n          order to print a random string via the echo command. This is\\n          done via a crafted POST request to /web/google_analytics.php.\\n\\n          If the server is vulnerable, the same command injection vector\\n          is leveraged to execute the payload.\\n\\n          This module has been successfully tested against Western Digital\\n          MyCloud version 2.30.183.\\n\\n          Note: based on the available disclosures, it seems that the\\n          command injection vector (CVE-2016-10108) might be exploitable\\n          without the authentication bypass (CVE-2018-17153) on versions\\n          before 2.21.126. The obtained results on 2.30.183 imply that\\n          the patch for CVE-2016-10108 did not actually remove the command\\n          injection vector, but only prevented unauthenticated access to it.\", \"disclosure_date\": \"2016-12-14\", \"fullname\": \"exploit/linux/http/wd_mycloud_unauthenticated_cmd_injection\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Western Digital MyCloud unauthenticated command injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/wd_mycloud_unauthenticated_cmd_injection.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/wd_mycloud_unauthenticated_cmd_injection\", \"references\": [\"CVE-2016-10108\", \"CVE-2018-17153\", \"URL-https://www.securify.nl/advisory/authentication-bypass-vulnerability-in-western-digital-my-cloud-allows-escalation-to-admin-privileges/\", \"URL-https://web.archive.org/web/20170315123948/https://www.stevencampbell.info/2016/12/command-injection-in-western-digital-mycloud-nas/\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Unix In-Memory\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:02.638562Z"}]}