CVE-2015-7709
Severity CVSS v4.0:
Pending analysis
Type:
CWE-264
Permissions, Privileges, and Access Control
Publication date:
05/10/2015
Last modified:
12/04/2025
Description
The arkeiad daemon in the Arkeia Backup Agent in Western Digital Arkeia 11.0.12 and earlier allows remote attackers to bypass authentication and execute arbitrary commands via a series of crafted requests involving the ARKFS_EXEC_CMD operation.
Impact
Base Score 2.0
10.00
Severity 2.0
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:arkeia:western_digital_arkeia:*:*:*:*:*:*:*:* | 11.0.12 (including) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://www.rapid7.com/db/modules/exploit/multi/misc/arkeia_agent_exec
- https://packetstormsecurity.com/files/132660/Western-Digital-Arkeia-11.0.13-Remote-Code-Execution.html
- https://www.exploit-db.com/exploits/37600/
- http://www.rapid7.com/db/modules/exploit/multi/misc/arkeia_agent_exec
- https://packetstormsecurity.com/files/132660/Western-Digital-Arkeia-11.0.13-Remote-Code-Execution.html
- https://www.exploit-db.com/exploits/37600/