CVE-2016-10108observed exploitation

CVE-2016-10108

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

62Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actepss 98%
from disclosure to weaponsame day
Published on NVDJan 3
metasploitDec 14
VulnCheck+2591d
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data.
Affected products
n/a · n/a