ZDI-23-852: (Pwn2Own) Western Digital MyCloud PR4100 account_mgr Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Western Digital MyCloud PR4100 NAS devices. Authentication is not required to exploit this vulnerability.

arbitrary code attackers authentication code code execution command command injection devices digital exploit injection mycloud nas network pwn2own remote code remote code execution vulnerability western western digital zdi