Vulnerability Description
Western Digital EdgeRover before 0.25 has an escalation of privileges vulnerability where a low privileged user could load malicious content into directories with higher privileges, because of how Node.js is used. An attacker can gain admin privileges and carry out malicious activities such as creating a fake library and stealing user credentials.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Westerndigital | Edgerover | < 0.25 |
References
- https://www.westerndigital.com/support/productsecurity/wdc-21007-edgerover-windoVendor Advisory
- https://www.westerndigital.com/support/productsecurity/wdc-21007-edgerover-windoVendor Advisory
FAQ
What is CVE-2021-33205?
CVE-2021-33205 is a vulnerability with a CVSS score of 8.8 (HIGH). Western Digital EdgeRover before 0.25 has an escalation of privileges vulnerability where a low privileged user could load malicious content into directories with higher privileges, because of how Nod...
How severe is CVE-2021-33205?
CVE-2021-33205 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-33205?
Check the references section above for vendor advisories and patch information. Affected products include: Westerndigital Edgerover.