CVE-2019-18929

PoC —

CVSS 3.1

8.8 high

EPSS

3%p86

Published

Nov 13, 2019 (Nov 13, 2019)

Modified

Jun 17, 2026

Description

Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mgr.cgi stack-based buffer overflow.

Vendors: western digital
Products: my cloud ex2 ultra firmware
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.9%)

In the news0 stories

No ingested article mentions this CVE yet.