← Database

CVE-2021-35941

HIGH CVSS: 7.5 Published: 2021-06-29 Modified: 2026-06-17

Description

Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an administrator API that can perform a system factory restore without authentication, as exploited in the wild in June 2021, a different vulnerability than CVE-2018-18472.

Affected Platforms

Westerndigital Wd My Book Live DuoWesterndigital Wd My Book Live Duo FirmwareWesterndigital Wd My Book Live FirmwareWesterndigital Wd My Book Live

Weakness Type

CWE-306

References