CVE-2021-3310 | BDVDB-2026-150246 Detail

Description#

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure (by reading local files).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.westerndigital.com/support/productsecurity/wdc-21002-my-cloud-firmware-version-5-10-122
https://www.zerodayinitiative.com/advisories/ZDI-21-277/

Exploit#

No public exploit known

History#

Version 12021-03-10Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.