CVE-2018-9148: westerndigital my_cloud_firmware Improper Authentication

Vulnerability summary

CVE-2018-9148 is a critical (CVSS 9.8) Improper Authentication vulnerability in westerndigital my_cloud_firmware. EPSS estimates a 3.61% chance of exploitation in the next 30 days, higher than 89.3% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 30-03-2018
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

Western Digital WD My Cloud v04.05.00-320 devices embed the session token (aka PHPSESSID) in filenames, which makes it easier for attackers to bypass authentication by listing a directory. NOTE: this can be exploited in conjunction with CVE-2018-7171 for remote authentication bypass within a product that uses My Cloud.

• CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.