Vulnerabilities > Western Digital > MY Cloud EX2 Ultra Firmware > 2.31.195

DATE CVE VULNERABILITY TITLE RISK
2019-11-13 CVE-2019-18931 Classic Buffer Overflow vulnerability in Western Digital MY Cloud EX2 Ultra Firmware 2.31.195
Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters.
network
low complexity
western-digital CWE-120
critical
 9.0
9.0
2019-11-13 CVE-2019-18929 Out-of-bounds Write vulnerability in Western Digital MY Cloud EX2 Ultra Firmware 2.31.195
Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mgr.cgi stack-based buffer overflow.
network
low complexity
western-digital CWE-787
critical
 9.0
9.0