Description
Western Digital My Cloud NAS chk_vv_sharename.php接口文件未对用户传入参数进行校验，导致命令执行漏洞，攻击者可通过构造恶意请求写入webshell，获取服务器权限。
Western Digital My Cloud NAS chk_vv_sharename.php 命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.securify.nl/advisory/western-digital-my-cloud-vulnerable-to-multiple-command-injection-vulnerabilities/
https://mrxn.net/jswz/Western-Digital-My-Cloud-NAS-chk_vv_sharename-rce.html
https://wiki.exploitee.rs/index.php/Western_Digital_MyCloud
https://security.szurek.pl/en/wd-my-cloud-mirror-211153-rce-and-authentication-bypass/
https://github.com/Mr-xn/Penetration_Testing_POC
https://www.ddpoc.com/DVB-2025-9265.html
https://cn-sec.com/archives/4464904.html