Description
This video demos two vulnerabilities.
A pre-authentication file upload vulnerability within the MyCloud series of NAS devices demonstrated with a PHP shell for remote root command execution.
A authentication bypass using a cgi binary which can be used with multiple post-authentication vulnerabilities on our site for remote root command execution.
Find the process at: https://www.exploitee.rs/index.php/Western_Digital_MyCloud
More hacks at: https://Exploitee.rs