VULNERABILITY INTELLIGENCE

CVE-2016-10108

CVSS score10 HIGH

EPSS probability97.77%

CISA KEVNot currently listed

Published2017-01-03

Last modified2026-06-17

Description

Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data.