CVE-2021-3310

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares

published March 10, 2021

CVSS
—
EPSS
1%
Percentile
62.7
In the wild
Unconfirmed
What it is

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure (by reading local files).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01008 · 62.7th percentile
Published
2021-03-10T04:55Z
EPSS history
Timeline
  • 10 MAR 04:55Z
    Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares
    cvelistv5