{"cvss":0.0,"datePublished":"2019-06-19T00:00:00Z","dateUpdated":"2019-06-19T00:00:00Z","description":"Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/language_configuration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the wild in June 2021 for factory reset commands,","dueDate":"","id":"CVE-2018-18472","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"my_book_live_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Western Digital my_book_live_firmware Improper Neutralization of Special Elements used in an OS Command","vendor":"Western Digital"}