Feb. 6, 2023, 2:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API commands for firmware uploads and installation.

access accounts api cloud cve devices digital firmware installation low my cloud privileged privileged accounts rest rest api western western digital western digital my cloud

Senior Offensive Cyber Analyst

@ PeopleTec | HUNTSVILLE, AL, United States

Cyber Systems Administrator

@ Peraton | San Diego, CA, United States

Senior Security Analyst (SOC)

@ Accesa & RaRo | Cluj-Napoca, Romania

Level 1 SOC Analyst

@ Telefonica Tech | Dublin, United Kingdom

Cyberspace Intelligence Analyst

@ Peraton | Fort Meade, MD, United States

Technical Product Manager, Electronic Warfare

@ Anduril | Costa Mesa, California, United States