CVE-2019-18931 - Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters

Back Back to CVE browser

HIGH

Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters

Published Nov 13, 2019

8.8

HIGH

CVSS 3.1

EPSS 2.20%

Description

Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8604
Advisory
https://github.com/DelspoN/CVE/blob/master/CVE-2019-18931/description.txt
x_refsource_MISCThird Party Advisory
https://github.com/DelspoN/CVE/tree/master/CVE-2019-18931
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8604		Advisory
https://github.com/DelspoN/CVE/blob/master/CVE-2019-18931/description.txt		x_refsource_MISCThird Party Advisory
https://github.com/DelspoN/CVE/tree/master/CVE-2019-18931		x_refsource_MISCExploitThird Party Advisory