CVE-2021-33205
High
Description
Western Digital EdgeRover before 0.25 has an escalation of privileges vulnerability where a low privileged user could load malicious content into directories with higher privileges, because of how Node.js is used. An attacker can gain admin privileges and carry out malicious activities such as creating a fake library and stealing user credentials.
SeverityHigh
CVSS8.8
Exploit probability—
ProductWesterndigital Edgerover
PublishedJun 11, 2021
First seenJun 11, 2021
How to fix
Update
- westerndigital edgerover0.25 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| westerndigital edgerover | v < 0.25 | 0.25 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.