ZDI-23-112: (Pwn2Own) Western Digital MyCloud PR4100 FTP Server Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Western Digital MyCloud PR4100 NAS devices. Authentication is not required to exploit this vulnerability.

arbitrary code attackers authentication buffer buffer overflow code code execution devices digital exploit ftp mycloud nas network overflow pwn2own remote code remote code execution server vulnerability western western digital zdi