HomeSecurity ResourcesCloud SecurityWD My Cloud Command Injection – Access All Private Folders

WD My Cloud Command Injection – Access All Private Folders

WD My Cloud NAS

This video is a demonstration of the command injection vulnerability in the WD My Cloud NAS. It shows that it is possible to remotely access every folder and file on the NAS regardless of permissions.

Offensive Minded Security Exploit Development

VerSprite's Research and Development division (a.k.a VS-Labs) is comprised of individuals who are passionate about diving into the internals of various technologies. Our clients rely on VerSprite's unique offerings of zero-day vulnerability research and exploit development to protect their assets from various threat actors. From advanced technical security training to our research for hire B.O.S.S offering, we help organizations solve their most complex technical challenges. Learn more →

Integrating Threat Modeling Throughout Your Enterprise

Offensive Security

DevSecOps

IRM Services

Threat Intelligence

Envisions Geopolitical Threat Report:

By Industry

Chrome Exploitation: How to easily launch a Chrome RCE+SBX exploit chain with one command

Security Resources

Who We Are

WD My Cloud Command Injection – Access All Private Folders

WD My Cloud NAS

Offensive Minded Security Exploit Development

WD My Cloud Command Injection – Access All Private Folders

Related Resources

VERSPRITE CYBERWATCH

Transforming Security: Mercury Financial Implements Zero Trust with VerSprite

Digital AdTech Firm’s CTO Focuses on Strategic Cybersecurity Alliances to Build Resiliency for Digital Turbine

Subscribe for Our Updates