SB2025041645 - Multiple vulnerabilities in Western Digital My Cloud Home and Duo

Security Bulletin ID SB2025041645

Severity

Medium

Patch available

YES

Number of vulnerabilities 3

Exploitation vector Remote access

Highest impact Code execution

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) Incorrect authorization (CVE-ID: CVE-2024-41110)

The vulnerability allows a remote attacker to bypass authorization checks.

The vulnerability exists due to AuthZ zero length regression. A remote user can bypass authentication and gain elevated privileges.

2) NULL pointer dereference (CVE-ID: CVE-2022-3109)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the vp3_decode_frame() function in libavcodec/vp3.c in FFmpeg. A remote attacker can perform a denial of service (DoS) attack.

3) Buffer overflow (CVE-ID: CVE-2023-4911)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient validation of GLIBC_TUNABLES environment variable. A local user can trigger memory corruption and execute arbitrary code with elevated privileges.

Remediation

Install update from vendor's website.

References

https://www.westerndigital.com/support/product-security/wdc-25002-western-digital-my-cloud-home-and-duo-firmware-9-8-0-102