Western Digital Arkeia Authentication Bypass and Local File Include Vulnerabilities
BID:62444
Info
Western Digital Arkeia Authentication Bypass and Local File Include Vulnerabilities
| Bugtraq ID: | 62444 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 17 2013 12:00AM |
| Updated: | Sep 21 2013 12:14AM |
| Credit: | xistence |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Western Digital Arkeia Authentication Bypass and Local File Include Vulnerabilities
Western Digital Arkeia is prone to an authentication-bypass vulnerability and a local file-include vulnerability.
An attacker can exploit these issues to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process or to upload arbitrary firmware update data to the affected device and take control of it.
Arkeia versions 10.0.10 and prior are vulnerable; other versions may be affected.
Western Digital Arkeia is prone to an authentication-bypass vulnerability and a local file-include vulnerability.
An attacker can exploit these issues to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process or to upload arbitrary firmware update data to the affected device and take control of it.
Arkeia versions 10.0.10 and prior are vulnerable; other versions may be affected.
Exploit / POC
Western Digital Arkeia Authentication Bypass and Local File Include Vulnerabilities
An attacker can exploit these issues using a web browser.
The following exploit is available:
An attacker can exploit these issues using a web browser.
The following exploit is available:
Solution / Fix
Western Digital Arkeia Authentication Bypass and Local File Include Vulnerabilities
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
References
Western Digital Arkeia Authentication Bypass and Local File Include Vulnerabilities
References:
References: