CVE:CVE-2018-17153
CNNVD:CNNVD-201809-848
Western Digital My Cloud是美国西部数据（Western Digital）公司的一款个人网络云存储设备。
Western Digital My Cloud 2.30.x及之前版本中存在身份验证绕过漏洞。攻击者可利用该漏洞无需密码以admin用户身份通过身份验证或无需登录便可创建有效的会话。
solution:Upgrade western_digital my_cloud_wdbctl0020hwt_firmware to a higher version than 2.30.196,and avoid the version (,2.30.196); Upgrade western_digital my_cloud_pr4100 to a higher version than 2.30.196,and avoid the version (,2.30.196); Upgrade western_digital my_cloud_pr2100_firmware to a higher version than 2.30.196,and avoid the version (,2.30.196); Upgrade western_digital my_cloud_mirror_gen_2_firmware to a higher version than 2.30.196,and avoid the version (,2.30.196); Upgrade western_digital my_cloud_mirror_firmware to a higher version than 2.30.196,and avoid the version (,2.30.196); Upgrade western_digital my_cloud_ex4100 to a higher version than 2.30.196,and avoid the version (,2.30.196); Upgrade western_digital my_cloud_ex4_firmware to a higher version than 2.30.196,and avoid the version (,2.30.196); Upgrade western_digital my_cloud_ex2100_firmware to a higher version than 2.30.196,and avoid the version (,2.30.196); Upgrade western_digital my_cloud_ex2_ultra_firmware to a higher version than 2.30.196,and avoid the version (,2.30.196); Upgrade western_digital my_cloud_ex2_firmware to a higher version than 2.30.196,and avoid the version (,2.30.196); Upgrade western_digital my_cloud_dl4100_firmware to a higher version than 2.30.196,and avoid the version (,2.30.196); Upgrade western_digital my_cloud_dl2100 to a higher version than 2.30.196,and avoid the version (,2.30.196)