← Database

CVE-2025-30247

N/A CVSS: N/A Published: 2025-09-29 Modified: 2026-06-17

Description

An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST.

Affected Platforms

Unknown

Weakness Type

CWE-78

References