{"vulnerability": "cve-2018-18472", "sightings": [{"uuid": "304aaf8c-ef97-4280-813e-84d612030fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "seen", "source": "MISP/343c8276-4f44-463a-b512-5a73d46b9699", "content": "", "creation_timestamp": "2024-11-14T06:09:10.000000Z"}, {"uuid": "39578f32-bc4a-47ac-ba89-0ec9f7de3c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "seen", "source": "https://t.me/CyberGovIL/1284", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d9\u05e9\u05e0\u05d4 \u05d1\u05de\u05d5\u05e6\u05e8\u05d9 WD \u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05dc\u05de\u05d7\u05d9\u05e7\u05ea \u05d4\u05de\u05d9\u05d3\u05e2 \u05d0\u05d5 \u05dc\u05d4\u05ea\u05e7\u05e0\u05ea \u05e4\u05d5\u05d2\u05e2\u05df | Com7229\n\n\u05dc\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4 \u05e4\u05e8\u05e1\u05de\u05d4 \u05d7\u05d1\u05e8\u05ea Western Digital \u05db\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d9\u05e9\u05e0\u05d4 \u05d1-2 \u05de\u05d5\u05e6\u05e8\u05d9 NAS \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4, My Book Live \u05d5-My Book Live Duo, \u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05dc\u05ea\u05e7\u05d9\u05e4\u05ea\u05dd \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05d4\u05e8\u05e6\u05ea \u05e4\u05e7\u05d5\u05d3\u05d5\u05ea \u05de\u05e8\u05d7\u05d5\u05e7.\n\n\u05d4\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e0\u05e6\u05dc\u05d9\u05dd \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d1\u05de\u05e7\u05e8\u05d9\u05dd \u05de\u05e1\u05d5\u05d9\u05de\u05d9\u05dd \u05dc\u05e6\u05d5\u05e8\u05da \u05d4\u05ea\u05e7\u05e0\u05ea \u05e4\u05d5\u05d2\u05e2\u05df, \u05d5\u05d1\u05de\u05e7\u05e8\u05d9\u05dd \u05d0\u05d7\u05e8\u05d9\u05dd \u05dc\u05de\u05d7\u05d9\u05e7\u05ea \u05d4\u05d2\u05d9\u05e9\u05d4 \u05dc\u05de\u05d9\u05d3\u05e2 \u05d4\u05de\u05d0\u05d5\u05d7\u05e1\u05df \u05d1\u05db\u05d5\u05e0\u05df, \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05d1\u05d9\u05e6\u05d5\u05e2 Factory Reset (\u05d7\u05d6\u05e8\u05d4 \u05dc\u05d4\u05d2\u05d3\u05e8\u05d5\u05ea \u05d4\u05d9\u05e6\u05e8\u05df).\n\n\u05de\u05d3\u05d5\u05d1\u05e8 \u05d1\u05de\u05d5\u05e6\u05e8\u05d9\u05dd \u05d9\u05e9\u05e0\u05d9\u05dd \u05e9\u05e7\u05d9\u05d1\u05dc\u05d5 \u05d0\u05ea \u05d4\u05e2\u05d3\u05db\u05d5\u05df \u05d4\u05d0\u05d7\u05e8\u05d5\u05df \u05de\u05d4\u05d9\u05e6\u05e8\u05df \u05d1\u05e9\u05e0\u05ea 2015.\n\n\u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d4\u05e8\u05dc\u05d5\u05d5\u05e0\u05d8\u05d9\u05ea \u05de\u05d6\u05d5\u05d4\u05d4 \u05db-CVE-2018-18472. \u05e6\u05d9\u05d5\u05df CVSS 9.8.\n\n\u05d4\u05d7\u05d1\u05e8\u05d4 \u05de\u05de\u05dc\u05d9\u05e6\u05d4 \u05d1\u05e9\u05dc\u05d1 \u05d6\u05d4 \u05dc\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd \u05d1\u05de\u05d5\u05e6\u05e8 \u05dc\u05e0\u05ea\u05e7\u05dd \u05de\u05d4\u05e8\u05e9\u05ea, \u05d4\u05df \u05d1\u05de\u05e7\u05e8\u05d9\u05dd \u05d1\u05d4\u05dd \u05de\u05ea\u05d0\u05e4\u05e9\u05e8\u05ea \u05d2\u05d9\u05e9\u05d4 \u05d9\u05e9\u05d9\u05e8\u05d4 \u05dc\u05de\u05d5\u05e6\u05e8 \u05de\u05e8\u05e9\u05ea \u05d4\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d5\u05d4\u05df \u05d1\u05de\u05e7\u05e8\u05d9\u05dd \u05d1\u05d4\u05dd \u05de\u05d5\u05d2\u05d3\u05e8 Port Forwarding \u05e2\u05dc \u05d4\u05e0\u05ea\u05d1, \u05d9\u05d3\u05e0\u05d9\u05ea \u05d0\u05d5 \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05e4\u05e8\u05d5\u05d8\u05d5\u05e7\u05d5\u05dc UPnP.\n\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d0 \u05dc\u05d0\u05e4\u05e9\u05e8 \u05d2\u05d9\u05e9\u05d4 \u05de\u05e8\u05e9\u05ea \u05d4\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8 \u05dc\u05de\u05d5\u05e6\u05e8\u05d9 NAS. \u05d0\u05dd \u05e0\u05d3\u05e8\u05e9\u05ea \u05d2\u05d9\u05e9\u05d4 \u05db\u05d6\u05d5 \u05de\u05e9\u05d9\u05e7\u05d5\u05dc\u05d9\u05dd \u05e2\u05e1\u05e7\u05d9\u05d9\u05dd, \u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05de\u05de\u05e9\u05d4 \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05e9\u05d9\u05e8\u05d5\u05ea \u05db\u05d2\u05d5\u05df VPN \u05e2\u05dd \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea \u05d5\u05d4\u05e6\u05e4\u05e0\u05d4 \u05de\u05ea\u05d0\u05d9\u05de\u05d9\u05dd.\n\n\u05de\u05e7\u05d5\u05e8\u05d5\u05ea:\nhttps://www.westerndigital.com/support/productsecurity/wdc-21008-recommended-security-measures-wd-mybooklive-wd-mybookliveduo\n\nhttps://community.wd.com/t/action-required-on-my-book-live-and-my-book-live-duo/268147", "creation_timestamp": "2021-06-27T16:24:46.000000Z"}, {"uuid": "89c28307-15d0-401d-b447-29e4c8047816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "seen", "source": "https://t.me/deeptoweb/1730", "content": "\u200b\u200b\u0415\u0441\u043b\u0438 \u0432\u044b \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435\u0441\u044c WD My Book Live, \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043e\u0442 \u0441\u0435\u0442\u0438, \u0438\u043d\u0430\u0447\u0435 \u043c\u043e\u0436\u0435\u0442\u0435 \u043f\u043e\u0442\u0435\u0440\u044f\u0442\u044c \u0432\u0441\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \n\n\u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u044b NAS \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430 Western Digital \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u0436\u0430\u043b\u0443\u044e\u0442\u0441\u044f, \u0447\u0442\u043e \u0441 \u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0431\u044b\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u044b \u0432\u0441\u0435 \u0444\u0430\u0439\u043b\u044b, \u0430 \u043e\u043d\u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0447\u0435\u0440\u0435\u0437 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0443 \u00ab\u043d\u0435\u0432\u0435\u0440\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c\u00bb.  \u041f\u043e\u043f\u044b\u0442\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (admin), \u0442\u043e\u0436\u0435 \u043d\u0435 \u043f\u043e\u043c\u043e\u0433\u0430\u044e\u0442.\n\n\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0435 \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e, \u0441\u0443\u0434\u044f \u043f\u043e \u043b\u043e\u0433\u0430\u043c, \u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0441\u0431\u0440\u043e\u0441\u0430 \u043a \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c.\n\n\u041e\u0434\u0438\u043d \u0438\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0438\u0448\u0435\u0442:\n    \u042f \u043d\u0430\u0448\u0435\u043b \u044d\u0442\u043e \u0432 user.log \u043c\u043e\u0435\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0430:\n    Jun 23 15:14:05 My BookLive factoryRestore.sh: begin script:\n    Jun 23 15:14:05 My BookLive shutdown24582: shutting down for system reboot\n    Jun 23 16:02:26 My BookLive S15mountDataVolume.sh: begin script: start\n    Jun 23 16:02:29 My BookLive : pkg: wd-nas\n    Jun 23 16:02:30 My BookLive : pkg: networking-general\n    Jun 23 16:02:30 My BookLive : pkg: apache-php-webdav\n    Jun 23 16:02:31 My BookLive : pkg: date-time\n    Jun 23 16:02:31 My BookLive : pkg: alerts\n    Jun 23 16:02:31 My BookLive logger: hostname=My BookLive\n    Jun 23 16:02:32 My BookLive : pkg: admin-rest-api\n\n\u041f\u043e\u0445\u043e\u0436\u0435, \u0432 \u044d\u0442\u043e\u043c \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u0441\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f... \u0412 \u044d\u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043d\u0438\u043a\u043e\u0433\u043e \u043d\u0435 \u0431\u044b\u043b\u043e \u0434\u043e\u043c\u0430, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u0434\u0440\u0430\u0439\u0432\u00bb, \u2014 \u043f\u0438\u0448\u0435\u0442 \u043e\u0434\u043d\u0430 \u0438\u0437 \u0436\u0435\u0440\u0442\u0432.\n\n\u041c\u043d\u043e\u0433\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0430\u0441\u0430\u044e\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b, \u0438 \u043d\u0435\u043a\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b NAS \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0441\u0431\u0440\u043e\u0441\u0430 \u043a \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c. \u041d\u043e \u0432 \u0442\u0430\u043a\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0441\u0442\u0440\u0430\u043d\u043d\u043e, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043d\u0435 \u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u043e\u043a \u0441 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u044b\u043a\u0443\u043f\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0433\u0440\u043e\u0437, \u0432\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0434\u044f \u0434\u0435\u0441\u0442\u0440\u0443\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u0438 \u0431\u0435\u0441\u0441\u043c\u044b\u0441\u043b\u0435\u043d\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443.\n\n\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u0441\u043c\u043e\u0433\u043b\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 PhotoRec. \u041d\u043e, \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u044d\u0442\u043e\u0442 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u043e\u043c\u043e\u0433 \u0434\u0430\u043b\u0435\u043a\u043e \u043d\u0435 \u0432\u0441\u0435\u043c.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 Western Digital \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 My Book Live \u0438 My Book Live Duo \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438\u0445 \u043e\u0442 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043f\u043e\u043a\u0430 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u044e\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435.\n\n    \u00abWestern Digital \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 My Book Live \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c. \u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u0442\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430 \u043a \u0441\u0431\u0440\u043e\u0441\u0443 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0434\u043e \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445, \u0447\u0442\u043e, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0442\u0438\u0440\u0430\u0435\u0442 \u0432\u0441\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n    \u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 My Book Live \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0432 2015 \u0433\u043e\u0434\u0443. \u041c\u044b \u043f\u043e\u043d\u0438\u043c\u0430\u0435\u043c, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0430\u0448\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u044b. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043c\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0432\u0430\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c My Book Live \u043e\u0442 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0434\u0430\u043d\u043d\u044b\u0435. \u041c\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u0431\u0443\u0434\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u044d\u0442\u0443 \u0432\u0435\u0442\u043a\u0443 \u043f\u043e \u043c\u0435\u0440\u0435 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\u00bb, \u2014 \u043f\u0438\u0448\u0443\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u0422\u0430\u043a\u0436\u0435 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u044b Western Digital \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0421\u041c\u0418, \u0447\u0442\u043e, \u043f\u043e \u0438\u0445 \u043c\u043d\u0435\u043d\u0438\u044e, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c  \u043d\u0435\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u043d\u0438 \u0431\u044b\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e. \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f WD My Book Live \u0432\u044b\u0448\u043b\u043e \u0432 2015 \u0433\u043e\u0434\u0443, \u0430 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 CVE-2018-18472,  \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442.", "creation_timestamp": "2021-06-25T15:30:14.000000Z"}, {"uuid": "5df728a1-03db-4d02-82c6-523f58b4eb02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "exploited", "source": "https://t.me/true_secator/1867", "content": "\u200b\u200b\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043f\u0440\u043e \u0437\u0430\u0433\u0430\u0434\u043e\u0447\u043d\u0443\u044e \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u0432 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u0431\u0440\u043e\u0441\u0430 \u043a \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u0435\u0439 My Book \u043e\u0442 Western Digital.\n\n\u0422\u043e\u0433\u0434\u0430 \u043c\u044b \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0440\u043e\u0432\u043e\u0437\u0432\u0435\u0441\u0442\u043d\u0438\u043a \u0432\u043e\u043b\u0438 \u0437\u0430\u0440\u043e\u0434\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u0432 \u043d\u0435\u0434\u0440\u0430\u0445 \u0441\u0435\u0442\u0438 SkyNet \u0438 \u0443\u0436\u0435 \u043f\u0440\u0438\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438\u0441\u044c \u0435\u043c\u0443 \u043f\u043e\u043a\u043b\u043e\u043d\u044f\u0442\u044c\u0441\u044f, \u0434\u043b\u044f \u0447\u0435\u0433\u043e \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0430\u043b\u0442\u0430\u0440\u044c \u0438\u0437 \u0441\u0442\u0430\u0440\u043e\u0433\u043e EC-1066, \u043f\u0440\u0438\u0440\u0438\u0441\u043e\u0432\u0430\u0432 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0448\u0435\u0441\u0442\u0435\u0440\u043a\u0443 \u043a \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044e \u043c\u043e\u0434\u0435\u043b\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u0437\u0430\u0438\u0447\u043d\u0435\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Censys \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u0438 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 My Book \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043e\u043a\u0430 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0441\u0431\u0440\u043e\u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043b\u044e\u0431\u043e\u043c\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u043a \u043d\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\u041f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u0441 \u044d\u0442\u0438\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0434\u0440\u0443\u0433\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0442\u0430\u0440\u0443\u044e CVE-2018-18472 \u0434\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0441\u0430\u0434\u0438\u0442\u044c \u0432 My Book \u0431\u043e\u0442\u0430, \u044f\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u0431\u043e\u0442\u043d\u0435\u0442\u0430 Linux.Ngioweb.27. \n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Censys \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0439 \u0441\u0431\u0440\u043e\u0441 \u043a \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u0431\u044b\u043b \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0431\u043e\u0440\u044c\u0431\u044b \u043c\u0435\u0436\u0434\u0443 \u0431\u043e\u0442\u043e\u0432\u043e\u0434\u0430\u043c\u0438 \u0437\u0430 \u043a\u043e\u0440\u043c\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443, \u0442\u043e \u0435\u0441\u0442\u044c \u044d\u0442\u043e \u0431\u044b\u043b\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0437\u0430\u0447\u0438\u0441\u0442\u0438\u0442\u044c \u0443\u0436\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u0435\u0441\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0431\u043e\u0442\u044b \u0438 \u0437\u0430\u0440\u0430\u0437\u0438\u0442\u044c \u0435\u0433\u043e \u0441\u0432\u043e\u0438\u043c\u0438.\n\n\u0411\u043e\u0442\u043e\u0432\u043e\u0434\u044b \u0434\u0435\u0440\u0443\u0442\u0441\u044f, \u0430 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0447\u0443\u0431\u044b \u0442\u0440\u0435\u0449\u0430\u0442.", "creation_timestamp": "2021-06-30T10:56:55.000000Z"}, {"uuid": "38e439c5-fbdd-45fc-bd08-171c709a379e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "exploited", "source": "https://t.me/SecLabNews/10467", "content": "\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Western Digital \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430 \u043f\u0440\u0438\u0447\u0438\u043d\u0443 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0441\u0431\u0440\u043e\u0441\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u0435\u0439 (NAS) Western Digital My Book \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0435\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u0441\u0442\u0430\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2018-18472, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0435\u0449\u0435 \u0432 2018 \u0433\u043e\u0434\u0443.\n\n \n\nhttps://www.securitylab.ru/news/521693.php", "creation_timestamp": "2021-06-28T12:30:04.000000Z"}, {"uuid": "49c8e84d-1ff0-4aa6-b6b4-6a3b2b927749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "exploited", "source": "https://t.me/SecLabNews/10479", "content": "\u0412 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Digital My Book \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Western Digital \u043f\u043e\u0432\u0438\u043d\u043d\u0430 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0442\u0430\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2018-18472, \u043a\u0430\u043a \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u043b\n \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c, \u043d\u043e \u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0430\u044f\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2021-35941, \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0441\u0443\u0434\u044f \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043a\u043e\u0434\u0443, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Western Digital \u0441\u0430\u043c \u0443\u0434\u0430\u043b\u0438\u043b \u043a\u043e\u0434, \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0440\u043e\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0435\u0440\u0435\u0434 \u0441\u0431\u0440\u043e\u0441\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0434\u043e \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445.\n\n \n\nhttps://www.securitylab.ru/news/521752.php", "creation_timestamp": "2021-06-30T09:10:02.000000Z"}, {"uuid": "b5e61469-cfe5-4f37-bb34-a84a644bb90f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3733", "content": "#Threat_Research\n1. CVE-2018-18472:\nWestern Digital My Book Live Mass Exploitation\nhttps://censys.io/blog/cve-2018-18472-western-digital-my-book-live-mass-exploitation\n2. RTSP NAT Slipstream on Google Chrome 89.0\n(PoC for CVE-2021-21210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248\n]-> NAT Slipstream samples:\nhttps://github.com/bananabr/natslipstream", "creation_timestamp": "2021-07-01T11:03:01.000000Z"}, {"uuid": "bca97312-91cc-460d-8ca1-40a1d4812298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "seen", "source": "https://t.me/hn_best_comments/9488", "content": "Re: WD My Book users wake up to find their data delete...\n        \nAccording to Western Digital[1], the CVE involved[2] has been public and unpatched since 2019. That's insane.\n\nThere's \"we don't support end-of-life devices\" and then there's \"we refuse to fix absolutely critical, crippling security vulnerabilities in devices just a few years old.\" This is well over the line.\n\nI smell (but have no idea of the merits of) a class action lawsuit.\n\n[1] https://www.westerndigital.com/support/productsecurity/wdc-21008-recommended-security-measures-wd-mybooklive-wd-mybookliveduo\n\n[2] https://nvd.nist.gov/vuln/detail/CVE-2018-18472\n        \nivraatiems, 4 hours ago", "creation_timestamp": "2026-08-02T00:01:11.729205Z"}, {"uuid": "52aeac00-3870-4e40-b595-3a931b940b2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "seen", "source": "https://t.me/hn_best_comments/9488", "content": "Re: WD My Book users wake up to find their data delete...\n        \nAccording to Western Digital[1], the CVE involved[2] has been public and unpatched since 2019. That's insane.\n\nThere's \"we don't support end-of-life devices\" and then there's \"we refuse to fix absolutely critical, crippling security vulnerabilities in devices just a few years old.\" This is well over the line.\n\nI smell (but have no idea of the merits of) a class action lawsuit.\n\n[1] https://www.westerndigital.com/support/productsecurity/wdc-21008-recommended-security-measures-wd-mybooklive-wd-mybookliveduo\n\n[2] https://nvd.nist.gov/vuln/detail/CVE-2018-18472\n        \nivraatiems, 4 hours ago", "creation_timestamp": "2026-08-01T08:00:04.425961Z"}, {"uuid": "adba4d73-63fd-414f-9d85-0f58ef017777", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f04cda3a-2bdd-4421-bec9-db376f47f027", "content": "", "creation_timestamp": "2026-06-19T12:53:13.200867Z"}, {"uuid": "a31cbb30-8862-4efc-9b42-ff08b658fe1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "published-proof-of-concept", "source": "https://t.me/shmelovod/192", "content": "\u0427\u0435\u0433\u043e \u043d\u0430\u043c \u0441\u0442\u043e\u0438\u0442 \u0440\u0435\u043f\u0443\u0442\u0430\u0446\u0438\u044f \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0444\u0438\u043a\u0441 \u0434\u043b\u044f CVE-2018-18472 \u043e\u0442 NAS WD\n\nhttps://habr.com/ru/post/564956/", "creation_timestamp": "2026-07-17T12:00:05.917864Z"}, {"uuid": "94659fdb-700b-4a48-99ce-2b78939588c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "published-proof-of-concept", "source": "https://t.me/shmelovod/192", "content": "\u0427\u0435\u0433\u043e \u043d\u0430\u043c \u0441\u0442\u043e\u0438\u0442 \u0440\u0435\u043f\u0443\u0442\u0430\u0446\u0438\u044f \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0444\u0438\u043a\u0441 \u0434\u043b\u044f CVE-2018-18472 \u043e\u0442 NAS WD\n\nhttps://habr.com/ru/post/564956/", "creation_timestamp": "2026-07-18T00:00:32.285533Z"}, {"uuid": "f195bc64-4ccf-4e7c-b4ec-9fa6ccc7d36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "seen", "source": "https://t.me/hn_best_comments/9488", "content": "Re: WD My Book users wake up to find their data delete...\n        \nAccording to Western Digital[1], the CVE involved[2] has been public and unpatched since 2019. That's insane.\n\nThere's \"we don't support end-of-life devices\" and then there's \"we refuse to fix absolutely critical, crippling security vulnerabilities in devices just a few years old.\" This is well over the line.\n\nI smell (but have no idea of the merits of) a class action lawsuit.\n\n[1] https://www.westerndigital.com/support/productsecurity/wdc-21008-recommended-security-measures-wd-mybooklive-wd-mybookliveduo\n\n[2] https://nvd.nist.gov/vuln/detail/CVE-2018-18472\n        \nivraatiems, 4 hours ago", "creation_timestamp": "2026-07-29T12:01:07.250368Z"}, {"uuid": "80538a56-0d41-4e66-ab4a-99606f2f66a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "seen", "source": "https://t.me/hn_best_comments/9488", "content": "Re: WD My Book users wake up to find their data delete...\n        \nAccording to Western Digital[1], the CVE involved[2] has been public and unpatched since 2019. That's insane.\n\nThere's \"we don't support end-of-life devices\" and then there's \"we refuse to fix absolutely critical, crippling security vulnerabilities in devices just a few years old.\" This is well over the line.\n\nI smell (but have no idea of the merits of) a class action lawsuit.\n\n[1] https://www.westerndigital.com/support/productsecurity/wdc-21008-recommended-security-measures-wd-mybooklive-wd-mybookliveduo\n\n[2] https://nvd.nist.gov/vuln/detail/CVE-2018-18472\n        \nivraatiems, 4 hours ago", "creation_timestamp": "2026-07-30T00:01:47.417684Z"}, {"uuid": "50ef490f-9d65-444f-b0c8-94ce8aa29f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "seen", "source": "https://t.me/cissp/3617", "content": "Research\n\"A Mirage of Safety:\nBug Finding and Exploit Techniques of Top Android Vendor's Privacy Protection Apps\", 2021.\nhttps://xlab.tencent.com/en/2021/05/14/A-Mirage-of-Safety-Bug-Finding-and-Exploit-Techniques-of-Top-Android-Vendors-Privacy-Protection-Apps\n// A1: Attack from malicious apps\n    A2: Attack from malicious apps which can gain system previledge\n    A3: Attackers have physically compromise the phone\n\nThreat Research\n1. CVE-2018-18472:\nWestern Digital My Book Live Mass Exploitation\nhttps://censys.io/blog/cve-2018-18472-western-digital-my-book-live-mass-exploitation\n2. RTSP NAT Slipstream on Google Chrome 89.0\n(PoC for CVE-2021-21210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248\n]-> NAT Slipstream samples:\nhttps://github.com/bananabr/natslipstream\n\nRed Team Tactics\n1. GateKeeper macOS Bypass\nhttps://theevilbit.github.io/posts/gatekeeper_not_a_bypass\n2. Metadata service MITM allows root privilege escalation (EKS/GKE)\nhttps://blog.champtar.fr/Metadata_MITM_root_EKS_GKE\n\nThreat\n1. An EPYC escape:\nCase-study of a KVM breakout (PoC for CVE-2021-29657)\nhttps://googleprojectzero.blogspot.com/2021/06/an-epyc-escape-case-study-of-kvm.html?m=0\n2. Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)\nhttps://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464", "creation_timestamp": "2026-09-01T17:00:46.687436Z"}, {"uuid": "c6ffa24f-39d7-4cf5-b59b-18f0831bfcf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "seen", "source": "https://t.me/cissp/3617", "content": "Research\n\"A Mirage of Safety:\nBug Finding and Exploit Techniques of Top Android Vendor's Privacy Protection Apps\", 2021.\nhttps://xlab.tencent.com/en/2021/05/14/A-Mirage-of-Safety-Bug-Finding-and-Exploit-Techniques-of-Top-Android-Vendors-Privacy-Protection-Apps\n// A1: Attack from malicious apps\n    A2: Attack from malicious apps which can gain system previledge\n    A3: Attackers have physically compromise the phone\n\nThreat Research\n1. CVE-2018-18472:\nWestern Digital My Book Live Mass Exploitation\nhttps://censys.io/blog/cve-2018-18472-western-digital-my-book-live-mass-exploitation\n2. RTSP NAT Slipstream on Google Chrome 89.0\n(PoC for CVE-2021-21210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248\n]-> NAT Slipstream samples:\nhttps://github.com/bananabr/natslipstream\n\nRed Team Tactics\n1. GateKeeper macOS Bypass\nhttps://theevilbit.github.io/posts/gatekeeper_not_a_bypass\n2. Metadata service MITM allows root privilege escalation (EKS/GKE)\nhttps://blog.champtar.fr/Metadata_MITM_root_EKS_GKE\n\nThreat\n1. An EPYC escape:\nCase-study of a KVM breakout (PoC for CVE-2021-29657)\nhttps://googleprojectzero.blogspot.com/2021/06/an-epyc-escape-case-study-of-kvm.html?m=0\n2. Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)\nhttps://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464", "creation_timestamp": "2026-09-02T01:04:34.176535Z"}, {"uuid": "e79104f4-fc9e-47c9-a30f-9f3f7b177e65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3617", "content": "Research\n\"A Mirage of Safety:\nBug Finding and Exploit Techniques of Top Android Vendor's Privacy Protection Apps\", 2021.\nhttps://xlab.tencent.com/en/2021/05/14/A-Mirage-of-Safety-Bug-Finding-and-Exploit-Techniques-of-Top-Android-Vendors-Privacy-Protection-Apps\n// A1: Attack from malicious apps\n    A2: Attack from malicious apps which can gain system previledge\n    A3: Attackers have physically compromise the phone\n\nThreat Research\n1. CVE-2018-18472:\nWestern Digital My Book Live Mass Exploitation\nhttps://censys.io/blog/cve-2018-18472-western-digital-my-book-live-mass-exploitation\n2. RTSP NAT Slipstream on Google Chrome 89.0\n(PoC for CVE-2021-21210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248\n]-> NAT Slipstream samples:\nhttps://github.com/bananabr/natslipstream\n\nRed Team Tactics\n1. GateKeeper macOS Bypass\nhttps://theevilbit.github.io/posts/gatekeeper_not_a_bypass\n2. Metadata service MITM allows root privilege escalation (EKS/GKE)\nhttps://blog.champtar.fr/Metadata_MITM_root_EKS_GKE\n\nThreat\n1. An EPYC escape:\nCase-study of a KVM breakout (PoC for CVE-2021-29657)\nhttps://googleprojectzero.blogspot.com/2021/06/an-epyc-escape-case-study-of-kvm.html?m=0\n2. Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)\nhttps://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464", "creation_timestamp": "2026-09-11T02:00:04.772292Z"}, {"uuid": "cc8694e9-ccfb-455f-9588-9bd7135230e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18472", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3617", "content": "Research\n\"A Mirage of Safety:\nBug Finding and Exploit Techniques of Top Android Vendor's Privacy Protection Apps\", 2021.\nhttps://xlab.tencent.com/en/2021/05/14/A-Mirage-of-Safety-Bug-Finding-and-Exploit-Techniques-of-Top-Android-Vendors-Privacy-Protection-Apps\n// A1: Attack from malicious apps\n    A2: Attack from malicious apps which can gain system previledge\n    A3: Attackers have physically compromise the phone\n\nThreat Research\n1. CVE-2018-18472:\nWestern Digital My Book Live Mass Exploitation\nhttps://censys.io/blog/cve-2018-18472-western-digital-my-book-live-mass-exploitation\n2. RTSP NAT Slipstream on Google Chrome 89.0\n(PoC for CVE-2021-21210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248\n]-> NAT Slipstream samples:\nhttps://github.com/bananabr/natslipstream\n\nRed Team Tactics\n1. GateKeeper macOS Bypass\nhttps://theevilbit.github.io/posts/gatekeeper_not_a_bypass\n2. Metadata service MITM allows root privilege escalation (EKS/GKE)\nhttps://blog.champtar.fr/Metadata_MITM_root_EKS_GKE\n\nThreat\n1. An EPYC escape:\nCase-study of a KVM breakout (PoC for CVE-2021-29657)\nhttps://googleprojectzero.blogspot.com/2021/06/an-epyc-escape-case-study-of-kvm.html?m=0\n2. Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)\nhttps://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464", "creation_timestamp": "2026-09-12T00:00:55.542209Z"}]}