Missing authentication for critical function in My Cloud PR4100 - #VU54524
Published: July 5, 2021
Vulnerability identifier: #VU54524
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-306
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise the affected device.
The
vulnerability exists due to an error in the configuration when
accessing the management API along with an empty password for the
"nobody" user account. A remote non-authenticated attacker can login under the "nobody" user account
with an empty password to the administrative interface and upload
an arbitrary OS image onto the device.
Successful exploitation of the vulnerability may allow an attacker to compromise the affected system.
Affected software
My Cloud PR4100
Remediation
Upgrade your firmware to My Cloud OS 5.