CVE-2015-7709

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0210%

EPSS Percentile16.82th

Published2015年10月5日

Last Modified2026年5月6日

Vulnerability Description

The arkeiad daemon in the Arkeia Backup Agent in Western Digital Arkeia 11.0.12 and earlier allows remote attackers to bypass authentication and execute arbitrary commands via a series of crafted requests involving the ARKFS_EXEC_CMD operation.

Affected Platforms (CPE)

📦

Arkeia

Western Digital Arkeia

<= 11.0.12

References & Advisories

🔗 http://www.rapid7.com/db/modules/exploit/multi/misc/arkeia_agent_exec

🔗 https://packetstormsecurity.com/files/132660/Western-Digital-Arkeia-11.0.13-Remote-Code-Execution.html

🔗 https://www.exploit-db.com/exploits/37600/