Description
Western Digital MyCloud是个人云存储设备，将存储设备连接到现有的网络上来提供数据和文件服务 Western Digital My Cloud的/web/backups/internal_backup.php文件backup_type参数存在命令注入漏洞，可使攻击者获取设备的管理员权限，攻陷设备。
Western Digital MyCloud /internal_backup.php 路径存在远程命令执行
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://mrxn.net/jswz/west-nas-internal_backup-rce.html
https://wiki.exploitee.rs/index.php/Western_Digital_MyCloud
https://fortiguard.fortinet.com/encyclopedia/ips/43936
https://www.bleepingcomputer.com/news/security/critical-wd-my-cloud-bug-allows-remote-command-injection/
https://nvd.nist.gov/vuln/detail/CVE-2025-30247
https://www.westerndigital.com/support/product-security/wdc-25006-western-digital-my-cloud-os-5-firmware-5-31-108
https://blog.stackademic.com/unclouding-the-risk-cve-2025-30247-and-the-hidden-command-injection-in-wd-my-cloud-nas-478280086df4