CVE-2017-17560 File upload in n/a
Unauthenticated file upload in the web administration component allows attackers to upload a PHP shell and execute arbitrary code as root.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-17560?
CVE-2017-17560 is a critical vulnerability in n/a, published on 12 Dec 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jquery/uploader/multi_uploadify.php, provides multipart upload functionality that is accessible without authentication and can be used to place a file anywhere on the device's file system. This allows an attacker the ability to upload a PHP shell onto the device and obtain arbitrary code execution as root.
Weakness: CWE-287
Which versions are affected by CVE-2017-17560?
It affects 1 product.
Products include Westerndigital My Cloud Pr4100 Firmware.
How do I fix CVE-2017-17560?
No fix has been published for CVE-2017-17560 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-17560 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2017-17560 exists.
Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.
Sources
Also known as GHSA-gchv-qvcf-v9x3.