CVE:CVE-2019-9949
CNNVD:CNNVD-201905-959
Western Digital My Cloud Mirror Gen2等都是美国西部数据（Western Digital）公司的产品。Western Digital My Cloud Mirror Gen2是一款个人云存储设备。Western Digital My Cloud EX2 Ultra是一款个人云存储设备。Western Digital My Cloud EX2100是一款个人存储设备。
多款Western Digital产品中存在安全漏洞，该漏洞源于程序没有过滤传递到cgi_unzip命令的‘name’参数。攻击者可利用该漏洞执行代码。以下产品及版本受到影响：使用2.31.183之前版本固件的Western Digital My Cloud Cloud Mirror Gen2；使用2.31.183之前版本固件的My Cloud Cloud EX2 Ultra；使用2.31.183之前版本固件的My Cloud Cloud EX2100；使用2.31.183之前版本固件的My Cloud Cloud EX4100；使用2.31.183之前版本固件的My Cloud Cloud DL2100；使用2.31.183之前版本固件的My Cloud Cloud DL4100；使用2.31.183之前版本固件的My Cloud Cloud PR2100；使用2.31.183之前版本固件的My Cloud Cloud PR4100。
solution:Upgrade westerndigital my_cloud_firmware to a higher version than 2.31.183,and avoid the version (,2.31.183); Upgrade westerndigital my_cloud_mirror_gen2_firmware to a higher version than 2.31.183,and avoid the version (,2.31.183); Upgrade westerndigital my_cloud_ex2_ultra_firmware to a higher version than 2.31.183,and avoid the version (,2.31.183); Upgrade westerndigital my_cloud_ex2100_firmware to a higher version than 2.31.183,and avoid the version (,2.31.183); Upgrade westerndigital my_cloud_ex4100_firmware to a higher version than 2.31.183,and avoid the version (,2.31.183); Upgrade westerndigital my_cloud_dl2100_firmware to a higher version than 2.31.183,and avoid the version (,2.31.183); Upgrade westerndigital my_cloud_dl4100_firmware to a higher version than 2.31.183,and avoid the version (,2.31.183); Upgrade westerndigital my_cloud_pr2100_firmware to a higher version than 2.31.183,and avoid the version (,2.31.183); Upgrade westerndigital my_cloud_pr4100_firmware to a higher version than 2.31.183,and avoid the version (,2.31.183)