ZDI-23-111: (Pwn2Own) Western Digital MyCloud PR4100 DDNS Response Processing Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Western Digital MyCloud PR4100. Authentication is not required to exploit this vulnerability.

arbitrary code attackers authentication code code execution command command injection digital exploit injection mycloud network pwn2own remote code remote code execution response vulnerability western western digital zdi