[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOXYWDGWa4BJONASrbXoomhv5a_61miaWzONHTJvPoAI":3,"g5a-risk:CVE-2019-9950":255},{"success":4,"data":5,"meta":253},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":100,"references":101,"referencesCount":119,"weaknesses":120,"weaknessesCount":129,"isActivelyExploited":130,"cisaInfo":15,"otxData":15,"relatedBlogPosts":131,"seoMetadata":132,"configurations":157,"relatedVendorCves":251,"notableEvents":252},"CVE-2019-9950","What is CVE-2019-9950?","Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is affected by an authentication bypass vulnerability. The login_mgr.cgi file checks credentials against \u002Fetc\u002Fshadow. However, the \"nobody\" account (which can be used to access the control panel API as a low-privilege logged-in user) has a default empty password, allowing an attacker to modify the My Cloud EX2 Ultra web page source code and obtain access to the My Cloud as a non-Admin My Cloud device user.","Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and M...","2019-04-24T18:29:01.793","2020-08-24T17:37:01.14",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.02304,[39,39,39,39,39,39,39],"Critical",[43,48,52,55,58,61,64,67,70,73,76,79,82,85,88,91,94,97],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"westerndigital","my_cloud_firmware","*","cpe:2.3:o:westerndigital:my_cloud_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"my_cloud","-","cpe:2.3:h:westerndigital:my_cloud:-:*:*:*:*:*:*:*",{"vendor":44,"product":53,"version":46,"criteria":54,"vulnerable":4},"my_cloud_mirror_gen2_firmware","cpe:2.3:o:westerndigital:my_cloud_mirror_gen2_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":56,"version":50,"criteria":57,"vulnerable":4},"my_cloud_mirror_gen2","cpe:2.3:h:westerndigital:my_cloud_mirror_gen2:-:*:*:*:*:*:*:*",{"vendor":44,"product":59,"version":46,"criteria":60,"vulnerable":4},"my_cloud_ex2_ultra_firmware","cpe:2.3:o:westerndigital:my_cloud_ex2_ultra_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":62,"version":50,"criteria":63,"vulnerable":4},"my_cloud_ex2_ultra","cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-:*:*:*:*:*:*:*",{"vendor":44,"product":65,"version":46,"criteria":66,"vulnerable":4},"my_cloud_ex2100_firmware","cpe:2.3:o:westerndigital:my_cloud_ex2100_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":68,"version":50,"criteria":69,"vulnerable":4},"my_cloud_ex2100","cpe:2.3:h:westerndigital:my_cloud_ex2100:-:*:*:*:*:*:*:*",{"vendor":44,"product":71,"version":46,"criteria":72,"vulnerable":4},"my_cloud_ex4100_firmware","cpe:2.3:o:westerndigital:my_cloud_ex4100_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":74,"version":50,"criteria":75,"vulnerable":4},"my_cloud_ex4100","cpe:2.3:h:westerndigital:my_cloud_ex4100:-:*:*:*:*:*:*:*",{"vendor":44,"product":77,"version":46,"criteria":78,"vulnerable":4},"my_cloud_dl2100_firmware","cpe:2.3:o:westerndigital:my_cloud_dl2100_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":80,"version":50,"criteria":81,"vulnerable":4},"my_cloud_dl2100","cpe:2.3:h:westerndigital:my_cloud_dl2100:-:*:*:*:*:*:*:*",{"vendor":44,"product":83,"version":46,"criteria":84,"vulnerable":4},"my_cloud_dl4100_firmware","cpe:2.3:o:westerndigital:my_cloud_dl4100_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":86,"version":50,"criteria":87,"vulnerable":4},"my_cloud_dl4100","cpe:2.3:h:westerndigital:my_cloud_dl4100:-:*:*:*:*:*:*:*",{"vendor":44,"product":89,"version":46,"criteria":90,"vulnerable":4},"my_cloud_pr2100_firmware","cpe:2.3:o:westerndigital:my_cloud_pr2100_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":92,"version":50,"criteria":93,"vulnerable":4},"my_cloud_pr2100","cpe:2.3:h:westerndigital:my_cloud_pr2100:-:*:*:*:*:*:*:*",{"vendor":44,"product":95,"version":46,"criteria":96,"vulnerable":4},"my_cloud_pr4100_firmware","cpe:2.3:o:westerndigital:my_cloud_pr4100_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":98,"version":50,"criteria":99,"vulnerable":4},"my_cloud_pr4100","cpe:2.3:h:westerndigital:my_cloud_pr4100:-:*:*:*:*:*:*:*",18,[102,106,111,115],{"url":103,"source":104,"tags":105},"https:\u002F\u002Fbnbdr.github.io\u002Fposts\u002Fwd\u002F","Github",[],{"url":107,"source":108,"tags":109},"https:\u002F\u002Fcommunity.wd.com\u002Ft\u002Fnew-release-my-cloud-firmware-versions-2-31-174-3-26-19\u002F235932","Wd",[110],"Vendor Advisory",{"url":112,"source":113,"tags":114},"https:\u002F\u002Fgithub.com\u002Fbnbdr\u002Fwd-rce\u002F","GitHub",[],{"url":116,"source":117,"tags":118},"https:\u002F\u002Fsupport.wdc.com\u002Fdownloads.aspx?g=2702&lang=en","Wdc",[110],4,[121],{"id":122,"name":123,"description":124,"extendedDescription":125,"status":126,"abstraction":127,"structure":128},"CWE-521","Weak Password Requirements","The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.","Authentication mechanisms often rely on a memorized secret (also known as a password) to provide an assertion of identity for a user of a system. It is therefore important that this password be of sufficient complexity and impractical for an adversary to guess. The specific requirements around how complex a password needs to be depends on the type of system being protected. Selecting the correct password requirements and enforcing them through implementation are critical to the overall success of the authentication mechanism.","Draft","Base","Simple",1,false,[],{"title":133,"metaDescription":134,"keywords":135,"canonicalUrl":136,"structuredData":137},"What is CVE-2019-9950? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-9950, a critical severity cyber security vulnerability from 2019. Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud...","CVE-2019-9950, CVE-2019-9950 vulnerability, CVE-2019-9950 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, westerndigital security, my_cloud_firmware vulnerability, my_cloud vulnerability, my_cloud_mirror_gen2_firmware vulnerability, my_cloud_mirror_gen2 vulnerability, my_cloud_ex2_ultra_firmware vulnerability","\u002Fwhat-is\u002Fcve-2019-9950",{"@context":138,"@type":139,"headline":133,"description":134,"datePublished":10,"dateModified":11,"author":140,"publisher":144,"about":148,"mainEntityOfPage":152,"articleSection":155,"keywords":156},"https:\u002F\u002Fschema.org","TechArticle",{"@type":141,"name":142,"url":143},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":141,"name":142,"url":143,"logo":145},{"@type":146,"url":147},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":149,"name":6,"description":150,"additionalType":151},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":153,"@id":154},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-9950","Cybersecurity","CVE-2019-9950, CVE-2019-9950 vulnerability, CVE-2019-9950 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[158,171,181,191,201,211,221,231,241],{"Operator":159,"Negate":15,"Nodes":160},"AND",[161,167],{"Operator":162,"Negate":15,"CPEMatch":163},"OR",[164],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":165,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":166,"VersionEndIncluding":15},"9B728EC5-A2EF-45CF-A161-A9D0091CD4CF","2.31.174",{"Operator":162,"Negate":15,"CPEMatch":168},[169],{"Vulnerable":15,"Criteria":51,"MatchCriteriaID":170,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3A9EE86B-05EE-4F2E-A912-624DDCF9C41B",{"Operator":159,"Negate":15,"Nodes":172},[173,177],{"Operator":162,"Negate":15,"CPEMatch":174},[175],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":176,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":166,"VersionEndIncluding":15},"FA1EBC48-CFA8-40F6-9C29-F4B317D96D83",{"Operator":162,"Negate":15,"CPEMatch":178},[179],{"Vulnerable":15,"Criteria":57,"MatchCriteriaID":180,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DC3A412B-F905-4FBC-8536-820AF5162A08",{"Operator":159,"Negate":15,"Nodes":182},[183,187],{"Operator":162,"Negate":15,"CPEMatch":184},[185],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":186,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":166,"VersionEndIncluding":15},"3A910B29-7691-400C-8AFD-F7D11FB4D7D9",{"Operator":162,"Negate":15,"CPEMatch":188},[189],{"Vulnerable":15,"Criteria":63,"MatchCriteriaID":190,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5A581EBA-A1F2-4ABC-8183-29973A46FA43",{"Operator":159,"Negate":15,"Nodes":192},[193,197],{"Operator":162,"Negate":15,"CPEMatch":194},[195],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":196,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":166,"VersionEndIncluding":15},"F0BF9CA3-79E8-4AF1-BCF2-52AFD14CE32B",{"Operator":162,"Negate":15,"CPEMatch":198},[199],{"Vulnerable":15,"Criteria":69,"MatchCriteriaID":200,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"ABBBDC1E-2320-4767-B669-1BB2FFB1E1C4",{"Operator":159,"Negate":15,"Nodes":202},[203,207],{"Operator":162,"Negate":15,"CPEMatch":204},[205],{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":206,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":166,"VersionEndIncluding":15},"2B51F996-016C-4361-A9CC-D1A5301408D1",{"Operator":162,"Negate":15,"CPEMatch":208},[209],{"Vulnerable":15,"Criteria":75,"MatchCriteriaID":210,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B78030F0-6655-4604-9D16-2FA1F3FD52FF",{"Operator":159,"Negate":15,"Nodes":212},[213,217],{"Operator":162,"Negate":15,"CPEMatch":214},[215],{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":216,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":166,"VersionEndIncluding":15},"7AFB62D6-3ADB-49DC-BD9C-6CA717150681",{"Operator":162,"Negate":15,"CPEMatch":218},[219],{"Vulnerable":15,"Criteria":81,"MatchCriteriaID":220,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9E783EBC-7608-4527-B1AD-9B4E7A7A108C",{"Operator":159,"Negate":15,"Nodes":222},[223,227],{"Operator":162,"Negate":15,"CPEMatch":224},[225],{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":226,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":166,"VersionEndIncluding":15},"9BCA9265-C4C9-47F9-99A4-D4E259652995",{"Operator":162,"Negate":15,"CPEMatch":228},[229],{"Vulnerable":15,"Criteria":87,"MatchCriteriaID":230,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F3034F4A-239C-4E38-9BD6-217361A7C519",{"Operator":159,"Negate":15,"Nodes":232},[233,237],{"Operator":162,"Negate":15,"CPEMatch":234},[235],{"Vulnerable":4,"Criteria":90,"MatchCriteriaID":236,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":166,"VersionEndIncluding":15},"850F34E6-D550-4BD3-A330-3827081956EB",{"Operator":162,"Negate":15,"CPEMatch":238},[239],{"Vulnerable":15,"Criteria":93,"MatchCriteriaID":240,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"BF58260B-2131-402C-A9DA-67B188136DE1",{"Operator":159,"Negate":15,"Nodes":242},[243,247],{"Operator":162,"Negate":15,"CPEMatch":244},[245],{"Vulnerable":4,"Criteria":96,"MatchCriteriaID":246,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":166,"VersionEndIncluding":15},"873ACDFD-112B-4E8F-ADE3-1E782C55D4BC",{"Operator":162,"Negate":15,"CPEMatch":248},[249],{"Vulnerable":15,"Criteria":99,"MatchCriteriaID":250,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"CB0C2FD9-4792-4DA2-9698-E53109A499EC",[],[],{"lastModified":11,"cacheTime":254,"version":33},1792266682430,{"score":256,"band":257,"action":258,"scoredAt":259},56,"Medium","Plan remediation","2026-10-16T06:46:04.551524+00:00"]