Skip to contentWestern Digital My Cloud vulnerabilities
- western digital my cloudAn OS command injection vulnerability in user interface in Western Digital My Cloud firmware...CVE-2025-302479.3 Critical
- western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +8 more +10 moreUnchecked buffer in Dynamic DNS clientCVE-2024-221709.2 Critical
- sandisk ibi web app, western digital wd cloud web app, my cloud home web app +1 more +3 moreCross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web AppsCVE-2024-221685.9 Medium
- sandisk ibi, western digital my cloud os 5, my cloud home & duo +12 more +14 moreUncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi productsCVE-2023-228194.9 Medium
- sandisk ibi, western digital my cloud os 5, my cloud home & duo +13 more +15 moreServer-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi productsCVE-2023-228175.5 Medium
- western digital my cloud os 5, westerndigital my cloud os +1 moreAuthentication Bypass issue in My Cloud OS 5 devicesCVE-2023-2281410.0 Critical
- western digital my cloud os 5, westerndigital my cloud os +1 morePost-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devicesCVE-2023-228156.2 Medium
- western digital my cloud os 5, westerndigital my cloud os +1 moreLimited Post-Authentication Remote Command Injection in My Cloud ProductsCVE-2023-228166.0 Medium
- sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +12 more +14 moreImpersonation attack causing an Authentication Bypass on Western Digital devicesCVE-2022-3633110.0 Critical
- sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +3 more +5 morePath Traversal Vulnerability leading to an arbitrary file read in Western Digital devicesCVE-2022-363285.8 Medium
- sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +3 more +5 morePath traversal vulnerability leading to an arbitrary file write in Western Digital devicesCVE-2022-363275.8 Medium
- sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +3 more +5 moreResource Exhaustion Vulnerability in Western Digital devicesCVE-2022-363264.4 Medium
- western digital my cloud os 5, westerndigital my cloud os +1 moreServer Side Request Forgery Vulnerability in Western Digital My Cloud DevicesCVE-2022-298405.1 Medium
- western digital my cloud os 5, westerndigital my cloud os +1 moreOS Command Injection vulnerability in Western Digital My Cloud devicesCVE-2022-298418.0 High
- western digital my cloud os 5, westerndigital my cloud os +1 moreCommand Injection Vulnerability in Western Digital My Cloud devicesCVE-2022-298429.8 Critical
- sandisk ibi, western digital my cloud home and my cloud home duo, westerndigital my cloud home duo firmware +2 more +4 moreDenial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devicesCVE-2022-363294.4 Medium
- sandisk ibi, western digital my cloud home and my cloud home duo, westerndigital my cloud home duo firmware +2 more +4 moreBuffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devicesCVE-2022-363301.9 Low
- sandisk ibi mobile app, ibi web app, western digital my cloud home mobile app +7 more +9 moreDevice API endpoint missing access controls on Western Digital Mobile and Web AppsCVE-2023-228133.3 Low
- western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 moreWestern Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftpCVE-2022-29844EPSS 36.4%6.7 Medium
- western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 moreWestern Digital My Cloud OS 5 devices Command Injection VulnerabilityCVE-2022-298436.2 Medium
- western digital my cloud, westerndigital my cloud os +1 moreRemote Backups Application Discloses Stored CredentialsCVE-2022-298394.1 Medium
- western digital my cloud, westerndigital my cloud os +1 moreAuthentication issue with the encrypted volumes and auto mount feature in My Cloud devicesCVE-2022-298384.3 Medium
- sandisk ibi, western digital my cloud home, westerndigital my cloud home duo firmware +2 more +4 morePath traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi DevicesCVE-2022-298374.7 Medium
- sandisk ibi, western digital my cloud home, westerndigital my cloud home duo firmware +2 more +4 morePost-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP APICVE-2022-298361.9 Low
- sandisk ibi, western digital my cloud home, my cloud home duo +3 more +5 moreBuffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibiCVE-2022-230061.8 Low
- western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 moreCross-site Scripting Vulnerability in USB Backups AppCVE-2022-229998.2 High
- western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +7 more +9 moreWeak Default SSL use in Port Forwarding ServiceCVE-2022-230007.3 High
- western digital my cloud home, westerndigital my cloud home duo firmware, my cloud home firmware +2 moreCommand Injection Vulnerability on My Cloud HomeCVE-2022-229976.8 Medium
- western digital my cloud home, westerndigital my cloud home duo firmware, my cloud home firmware +2 moreProtecting AWS credentials stored in plaintext on My Cloud HomeCVE-2022-229988.0 High
- netatalk, western digital my cloud, my cloud home +12 more +14 moreWestern Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in NetatalkCVE-2022-22995Fix available10.0 Critical
- western digital my cloud, westerndigital my cloud os +1 moreInsufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices.CVE-2022-229948.8 High
- western digital my cloud, westerndigital my cloud os +1 moreLimited Server-Side Request Forgery vulnerability on Western Digital My Cloud devices.CVE-2022-229937.8 High
- western digital my cloud, westerndigital my cloud os +1 moreLimited authentication bypass vulnerability on Western Digital My Cloud devicesCVE-2022-229907.8 High
- western digital my cloud, westerndigital my cloud os +1 moreCommand injection through unsecured HTTP calls on Western Digital My Cloud devicesCVE-2022-229917.8 High
- western digital my cloud, westerndigital my cloud os +1 morePre-authenticated stack overflow vulnerability on FTP ServiceCVE-2022-229899.8 Critical