An elevation of privilege flaw in the Western Digital My Cloud platform allows attackers to gain admin-level access to the device via an HTTP request. Researchers at vulnerability shop Securify say the vulnerability, designated CVE-2018-17153, would allow an attacker with network access to the device to bypass the login controls and create a session with admin privileges.

Read full news article on The Register