Description
Western Digital My Cloud NAS是美国西部数据（WesternDigital）公司的一款应用广泛的网络连接云存储设备，可用于托管文件，并自动备份和同步该文件与各种云和基于Web的服务。Western Digital MyCloud NAS multi_uploadify.php 接口存在任意文件上传漏洞，允许未经身份验证的攻击者上传恶意代码，植入后门，获取服务器权限，并控制整个Web 服务器。
Western Digital My Cloud NAS multi_uploadify.php 文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cloud.tencent.com/developer/article/1043712
https://www.tenablecloud.cn/plugins/nessus/105732
https://jiwo.org/ken/detail.php?id=1183
https://www.anquanke.com/post/id/93963
https://www.secrss.com/articles/131
https://www.rapid7.com/db/modules/exploit/linux/http/wd_mycloud_multiupload_upload/
https://nvd.nist.gov/vuln/detail/CVE-2017-17560
https://www.exploit-db.com/exploits/43356
https://thehackernews.com/2018/01/western-digital-mycloud.html
https://wiki.exploitee.rs/index.php/Western_Digital_MyCloud
https://mrxn.net/jswz/Western-Digital-My-Cloud-NAS-multi_uploadify-rce.html
https://github.com/Mr-xn/Penetration_Testing_POC
https://www.cvedetails.com/cve/CVE-2017-17560/