CVE:CVE-2019-9951
CNNVD:CNNVD-201904-1121
Western Digital My Cloud等都是美国西部数据（Western Digital）公司的一款个人存储设备。
多款Western Digital产品中存在安全漏洞。攻击者可利用该漏洞访问web/jquery/uploader/uploadify.php页面，上传任意文件。以下产品受到影响：Western Digital My Cloud；My Cloud Mirror Gen2；My Cloud EX2 Ultra；My Cloud EX2100；My Cloud EX4100；My Cloud DL2100；My Cloud DL4100；My Cloud PR2100；My Cloud PR4100。
solution:Upgrade western_digital my_cloud_mirror_gen_2_firmware to a higher version than 2.31.174,and avoid the version (,2.31.174); Upgrade western_digital my_cloud_ex2_ultra_firmware to a higher version than 2.31.174,and avoid the version (,2.31.174); Upgrade western_digital my_cloud_ex2100_firmware to a higher version than 2.31.174,and avoid the version (,2.31.174); Upgrade western_digital my_cloud_ex4100 to a higher version than 2.31.174,and avoid the version (,2.31.174); Upgrade western_digital my_cloud_dl2100 to a higher version than 2.31.174,and avoid the version (,2.31.174); Upgrade western_digital my_cloud_dl4100_firmware to a higher version than 2.31.174,and avoid the version (,2.31.174); Upgrade western_digital my_cloud_pr2100_firmware to a higher version than 2.31.174,and avoid the version (,2.31.174); Upgrade western_digital my_cloud_pr4100 to a higher version than 2.31.174,and avoid the version (,2.31.174); Upgrade western_digital my_cloud_firmware to a higher version than 2.31.174,and avoid the version (,2.31.174)