Western Digital My Cloud NAS devices vulnerable to unauthenticated RCE (CVE-2025-30247)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-30247 | An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to… | 9.3 | 1% |
From the original article
1 min read at helpnetsecurity.com
Western Digital has fixed a critical remote code execution vulnerability (CVE-2025-30247) in the firmware powering its My Cloud network-attached storage (NAS) devices, and has urged users to upgrade as soon as possible. Western Digital’s My Cloud devices are designed for home and small business users, to store documents and other content and access it via mobile apps or web browser.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.