Arkeia Virtual Appliance Firmware

arkeia_virtual_appliance_firmware

Vendor: Westerndigital • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2014-2846

1Westerndigital

1Arkeia Virtual Appliance Firmware

May 6, 2026

Apr 28, 2014

N/A· v4

N/A· v3

7.5 HIGH· v2

Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual appliance (AVA) with firmware before 10.2.9 allows remote attackers to read arbitrary files and execute arbitrary PHP code via a ..././ (dot dot dot slash dot slash) in the lang Cookie parameter, as demonstrated by a request to login/doLogin.Show less