High severity7.5NVD Advisory· Published Jun 29, 2021· Updated Jun 17, 2026

CVE-2021-35941

Description

Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an administrator API that can perform a system factory restore without authentication, as exploited in the wild in June 2021, a different vulnerability than CVE-2018-18472.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Westerndigital/Wd My Book Live Duo Firmware
cpe:2.3:o:westerndigital:wd_my_book_live_duo_firmware:*:*:*:*:*:*:*:*
Westerndigital/Wd My Book Live Firmware
cpe:2.3:o:westerndigital:wd_my_book_live_firmware:*:*:*:*:*:*:*:*
Range: >=2.0
Western Digital/WD My Book Live and WD My Book Live Duodescription
Westerndigital/WD My Book Livellm-fuzzy
Range: 2.x and later

Patches

Vulnerability mechanics

References

arstechnica.com/gadgets/2021/06/hackers-exploited-0-day-not-2018-bug-to-mass-wipe-my-book-live-devices/nvdExploitThird Party Advisory
www.westerndigital.com/support/productsecurity/wdc-21008-recommended-security-measures-wd-mybooklive-wd-mybookliveduonvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.010
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000