References https://www.cnvd.org.cn/flaw/show/CNVD-2017-00116 https://www.h3c.com/cn/d_201701/968939_30003_0.htm https://nvd.nist.gov/vuln/detail/CVE-2016-10108 https://mrxn.net/jswz/west-nas-index-rce.html https://cloud.tencent.com/developer/article/2583010 https://www.helpnetsecurity.com/2025/09/30/western-digital-my-cloud-nas-cve-2025-30247/ https://www.bleepingcomputer.com/news/security/critical-wd-my-cloud-bug-allows-remote-command-injection/ https://www.exploit-db.com/exploits/43435 https://blog.exploitee.rs/2017/hacking_wd_mycloud/ https://github.com/bnbdr/wd-rce https://zhuanlan.zhihu.com/p/66786128 https://www.linuxidc.com/Linux/2017-01/139178.htm
Related VulnerabilitiesPoCibm-websphere-ssrf: IBM WebSphere HCL Digital Experience - Server-Side Request ForgeryPoCCVE-2020-36884: BrightSign Digital Signage 8.2.26 - Server-Side Request ForgeryBrightSign Digital Signage /speedtest SSRF 漏洞PoCCVE-2024-5057: WordPress Easy Digital Downloads <= 3.2.12 - SQL InjectionPoCCVE-2023-30869: Easy Digital Downloads - Privilege Escalation西部数码 NAS sendLogToSupport.php 远程代码执行漏洞western-digital-mycloud-multi-uploadify-file-upload: Western Digital MyCloud Multi Uploadify File UploadPoCCVE-2010-2307: Motorola SBV6120E SURFboard Digital Voice Modem SBV6X2X-1.0.0.5-SCM - Directory TraversalPoCCVE-2016-10108: Western Digital MyCloud NAS - Command InjectionPoCCVE-2018-17153: Western Digital MyCloud NAS - Authentication BypassPoCCVE-2021-27748: IBM WebSphere HCL Digital Experience - Server-Side Request ForgeryPoCCVE-2022-34534: Digital Watchdog DW Spectrum Server 4.2.0.32842 - Information DisclosurePoCCVE-2023-23489: WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL Injection