Western Digital vulnerabilities

Products

• My Cloud 14
• My Cloud Os 5 12
• My Cloud Home 6
• My Cloud Home And My Cloud Home Duo 6
• Sweet B Library 4
• Wd Discovery 3
• My Cloud Home & Duo 2
• My Cloud Home Web App 2

Newest

• western digital wd discovery DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows... CVE-2025-30248 8.9 HighJanuary 26, 2026
• western digital my cloud An OS command injection vulnerability in user interface in Western Digital My Cloud firmware... CVE-2025-30247 9.3 CriticalSeptember 29, 2025
• western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +8 more +10 more Unchecked buffer in Dynamic DNS client CVE-2024-22170 9.2 CriticalSeptember 27, 2024
• western digital wd discovery Misconfiguration in node.js causing a code execution in WD Discovery CVE-2024-22169 7.1 HighAugust 2, 2024
• sandisk ibi web app, western digital wd cloud web app, my cloud home web app +1 more +3 more Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps CVE-2024-22168 5.9 MediumJune 24, 2024
• sandisk ibi, western digital my cloud os 5, my cloud home & duo +12 more +14 more Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products CVE-2023-22819 4.9 MediumFebruary 5, 2024
• sandisk ibi, western digital my cloud os 5, my cloud home & duo +13 more +15 more Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products CVE-2023-22817 5.5 MediumFebruary 5, 2024
• western digital my cloud os 5, westerndigital my cloud os +1 more Authentication Bypass issue in My Cloud OS 5 devices CVE-2023-22814 10.0 CriticalJune 30, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices CVE-2023-22815 6.2 MediumJune 30, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more Limited Post-Authentication Remote Command Injection in My Cloud Products CVE-2023-22816 6.0 MediumJune 30, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +12 more +14 more Impersonation attack causing an Authentication Bypass on Western Digital devices CVE-2022-36331 10.0 CriticalJune 12, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +3 more +5 more Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices CVE-2022-36328 5.8 MediumMay 18, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +3 more +5 more Path traversal vulnerability leading to an arbitrary file write in Western Digital devices CVE-2022-36327 5.8 MediumMay 18, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +3 more +5 more Resource Exhaustion Vulnerability in Western Digital devices CVE-2022-36326 4.4 MediumMay 18, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more Server Side Request Forgery Vulnerability in Western Digital My Cloud Devices CVE-2022-29840 5.1 MediumMay 10, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more OS Command Injection vulnerability in Western Digital My Cloud devices CVE-2022-29841 8.0 HighMay 10, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more Command Injection Vulnerability in Western Digital My Cloud devices CVE-2022-29842 9.8 CriticalMay 10, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, westerndigital my cloud home duo firmware +2 more +4 more Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices CVE-2022-36329 4.4 MediumMay 10, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, westerndigital my cloud home duo firmware +2 more +4 more Buffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices CVE-2022-36330 1.9 LowMay 9, 2023
• sandisk ibi mobile app, ibi web app, western digital my cloud home mobile app +7 more +9 more Device API endpoint missing access controls on Western Digital Mobile and Web Apps CVE-2023-22813 3.3 LowMay 8, 2023
• western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 more Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp CVE-2022-29844 EPSS 36.4% 6.7 MediumJanuary 25, 2023
• western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 more Western Digital My Cloud OS 5 devices Command Injection Vulnerability CVE-2022-29843 6.2 MediumJanuary 25, 2023
• western digital my cloud, westerndigital my cloud os +1 more Remote Backups Application Discloses Stored Credentials CVE-2022-29839 4.1 MediumDecember 9, 2022
• western digital my cloud, westerndigital my cloud os +1 more Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices CVE-2022-29838 4.3 MediumDecember 9, 2022
• sandisk ibi, western digital my cloud home, westerndigital my cloud home duo firmware +2 more +4 more Path traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices CVE-2022-29837 4.7 MediumDecember 1, 2022
• sandisk ibi, western digital my cloud home, westerndigital my cloud home duo firmware +2 more +4 more Post-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP API CVE-2022-29836 1.9 LowNovember 9, 2022
• sandisk ibi, western digital my cloud home, my cloud home duo +3 more +5 more Buffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi CVE-2022-23006 1.8 LowSeptember 27, 2022
• western digital wd discovery WD Discovery's Use of Weak Hashing Algorithm for Code Signing CVE-2022-29835 5.3 MediumSeptember 19, 2022
• western digital sweet b library, westerndigital sweet b +1 more Algorithm incorrectly returning error and Invalid unreduced value written to output buffer CVE-2022-23004 5.3 MediumJuly 29, 2022
• western digital sweet b library, westerndigital sweet b +1 more Shared secret or Point multiplication of NIST P-256 points with X coordinate of zero CVE-2022-23003 5.3 MediumJuly 29, 2022
• western digital sweet b library, westerndigital sweet b +1 more Point Compression/Decompression of NIST P-256 points with X coordinate of zero CVE-2022-23002 5.3 MediumJuly 29, 2022
• western digital sweet b library, westerndigital sweet b +1 more Sweet-B Library: Point compress/decompress using the wrong bit for sign CVE-2022-23001 5.3 MediumJuly 29, 2022
• western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 more Cross-site Scripting Vulnerability in USB Backups App CVE-2022-22999 8.2 HighJuly 25, 2022
• western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +7 more +9 more Weak Default SSL use in Port Forwarding Service CVE-2022-23000 7.3 HighJuly 25, 2022
• western digital my cloud home, westerndigital my cloud home duo firmware, my cloud home firmware +2 more Command Injection Vulnerability on My Cloud Home CVE-2022-22997 6.8 MediumJuly 12, 2022
• western digital my cloud home, westerndigital my cloud home duo firmware, my cloud home firmware +2 more Protecting AWS credentials stored in plaintext on My Cloud Home CVE-2022-22998 8.0 HighJuly 12, 2022
• netatalk, western digital my cloud, my cloud home +12 more +14 more Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk CVE-2022-22995 Fix available 10.0 CriticalMarch 25, 2022
• western digital my cloud, westerndigital my cloud os +1 more Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices. CVE-2022-22994 8.8 HighJanuary 28, 2022
• western digital my cloud, westerndigital my cloud os +1 more Limited Server-Side Request Forgery vulnerability on Western Digital My Cloud devices. CVE-2022-22993 7.8 HighJanuary 28, 2022
• western digital edgerover Insecure file and directory permissions on EdgeRover CVE-2022-22988 7.7 HighJanuary 13, 2022
• western digital my cloud, westerndigital my cloud os +1 more Limited authentication bypass vulnerability on Western Digital My Cloud devices CVE-2022-22990 7.8 HighJanuary 13, 2022
• western digital my cloud, westerndigital my cloud os +1 more Command injection through unsecured HTTP calls on Western Digital My Cloud devices CVE-2022-22991 7.8 HighJanuary 13, 2022
• western digital my cloud, westerndigital my cloud os +1 more Pre-authenticated stack overflow vulnerability on FTP Service CVE-2022-22989 9.8 CriticalJanuary 13, 2022
• western digital tv live hub, tv media player, westerndigital tv live hub firmware +1 more +3 more The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow... CVE-2018-1151 9.8 CriticalJune 12, 2018