cvedb.io
 ← back to explore
CVE detail

CVE-2013-5006 — CVE-2013-5006

Published 2013-07-31 · Modified 2026-06-16 · Vendor westerndigital · Product my_net_n900 · Source nvd
UNKNOWN
severity
CVSS-derived band
n/a
CVSS v3
0–10 scale
0.0456
EPSS probability
exploitation probability, 30d
91.0%
EPSS percentile
percentile vs all CVEs
NOT LISTED
CISA KEV
known exploited catalog

Description

main_internet.php on the Western Digital My Net N600 and N750 with firmware 1.03.12 and 1.04.16, and the N900 and N900C with firmware 1.05.12, 1.06.18, and 1.06.28, allows remote attackers to discover the cleartext administrative password by reading the "var pass=" line within the HTML source code.

Remediation

No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.

References

cvedb.io · NVD · CISA KEV · FIRST EPSS · vendor advisories (CVE Program List v5). Informational only, no warranty — verify every remediation against the vendor advisory before acting on it. This product uses data from the NVD API but is not endorsed or certified by the NVD, CISA, FIRST.org or any vendor named. CVE® is a registered trademark of The MITRE Corporation.