Westerndigital vulnerabilities

Products

• My Cloud Os 18
• My Cloud Home Firmware 14
• My Cloud Firmware 13
• My Cloud Home Duo Firmware 13
• My Cloud Pr4100 Firmware 12
• My Cloud Dl2100 Firmware 11
• My Cloud Dl4100 Firmware 11
• My Cloud Ex2100 Firmware 11
• My Cloud Ex2 Ultra Firmware 11
• My Cloud Ex4100 Firmware 11
• Sandisk Ibi Firmware 11
• My Cloud Os 5 10
• My Cloud Pr2100 Firmware 10
• My Cloud Mirror G2 Firmware 8
• Sweet B 4
• Wd Cloud Firmware 4
• Wd Discovery 4
• Sandisk X600 Sd9sb8w-128g Firmware 3
• Sandisk X600 Sd9sb8w-1t00 Firmware 3
• Sandisk X600 Sd9sb8w-256g Firmware 3
• Sandisk X600 Sd9sb8w-2t00 Firmware 3
• Sandisk X600 Sd9sb8w-512g Firmware 3
• Sandisk X600 Sd9sn8w-128g Firmware 3
• Sandisk X600 Sd9sn8w-1t00 Firmware 3
• Sandisk X600 Sd9sn8w-256g Firmware 3
• Sandisk X600 Sd9sn8w-2t00 Firmware 3
• Sandisk X600 Sd9sn8w-512g Firmware 3
• Sandisk X600 Sd9tb8w-128g Firmware 3
• Sandisk X600 Sd9tb8w-1t00 Firmware 3
• Sandisk X600 Sd9tb8w-256g Firmware 3
• Sandisk X600 Sd9tb8w-2t00 Firmware 3
• Sandisk X600 Sd9tb8w-512g Firmware 3
• Sandisk X600 Sd9tn8w-128g Firmware 3
• Sandisk X600 Sd9tn8w-1t00 Firmware 3
• Sandisk X600 Sd9tn8w-256g Firmware 3
• Sandisk X600 Sd9tn8w-2t00 Firmware 3
• Sandisk X600 Sd9tn8w-512g Firmware 3
• Edgerover 2
• My Cloud 2
• My Cloud Glacier Firmware 2

Show 43 moreShow less

• My Cloud Home 2
• My Cloud Mirror Gen2 Firmware 2
• Sandisk Privateaccess 2
• Sandisk X300 Sd7sb6s-128g Firmware 2
• Sandisk X300 Sd7sb6s-256g Firmware 2
• Sandisk X300 Sd7sb7s-010t Firmware 2
• Sandisk X300 Sd7sb7s-512g Firmware 2
• Sandisk X300 Sd7sf6s-128g Firmware 2
• Sandisk X300 Sd7sf6s-256g Firmware 2
• Sandisk X300 Sd7sf6s-512g Firmware 2
• Sandisk X300 Sd7sn6s-128g Firmware 2
• Sandisk X300 Sd7sn6s-256g Firmware 2
• Sandisk X300 Sd7sn6s-512g Firmware 2
• Sandisk X300s Sd7sb3q-064g Firmware 2
• Sandisk X300s Sd7sn3q-064g Firmware 2
• Sandisk X300s Sd7ub2q-010t Firmware 2
• Sandisk X300s Sd7ub2q-512g Firmware 2
• Sandisk X300s Sd7ub3q-128g Firmware 2
• Sandisk X300s Sd7ub3q-256g Firmware 2
• Sandisk X300s Sd7un3q-128g Firmware 2
• Sandisk X300s Sd7un3q-256g Firmware 2
• Sandisk X300s Sd7un3q-512g Firmware 2
• Sandisk X400 Sd8sb8u-128g-1122 Firmware 2
• Sandisk X400 Sd8sb8u-128g Firmware 2
• Sandisk X400 Sd8sb8u-1t00-1122 Firmware 2
• Sandisk X400 Sd8sb8u-1t00 Firmware 2
• Sandisk X400 Sd8sb8u-256g-1122 Firmware 2
• Sandisk X400 Sd8sb8u-256g Firmware 2
• Sandisk X400 Sd8sb8u-512g-1122 Firmware 2
• Sandisk X400 Sd8sb8u-512g Firmware 2
• Sandisk X400 Sd8sn8u-128g-1122 Firmware 2
• Sandisk X400 Sd8sn8u-128g Firmware 2
• Sandisk X400 Sd8sn8u-1t00-1122 Firmware 2
• Sandisk X400 Sd8sn8u-1t00 Firmware 2
• Sandisk X400 Sd8sn8u-256g-1122 Firmware 2
• Sandisk X400 Sd8sn8u-256g Firmware 2
• Sandisk X400 Sd8sn8u-512g-1122 Firmware 2
• Sandisk X400 Sd8sn8u-512g Firmware 2
• Sandisk X400 Sd8tb8u-128g-1122 Firmware 2
• Sandisk X400 Sd8tb8u-1t00-1122 Firmware 2
• Sandisk X400 Sd8tb8u-256g-1122 Firmware 2
• Sandisk X400 Sd8tb8u-512g-1122 Firmware 2
• Ssd Dashboard 2

Newest

• western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +8 more +10 more Unchecked buffer in Dynamic DNS client CVE-2024-22170 9.2 CriticalSeptember 27, 2024
• western digital wd discovery Misconfiguration in node.js causing a code execution in WD Discovery CVE-2024-22169 7.1 HighAugust 2, 2024
• westerndigital sandisk privateaccess, sandisk privateaccess windows app +1 more SanDisk PrivateAccess DLL Hijacking Vulnerability CVE-2024-22167 7.9 HighMarch 13, 2024
• sandisk ibi, western digital my cloud os 5, my cloud home & duo +12 more +14 more Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products CVE-2023-22819 4.9 MediumFebruary 5, 2024
• sandisk ibi, western digital my cloud os 5, my cloud home & duo +13 more +15 more Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products CVE-2023-22817 5.5 MediumFebruary 5, 2024
• sandisk security installer for windows, westerndigital sandisk security installer +1 more Multiple DLL Search Order hijacking Vulnerabilities in SanDisk Security Installer for Windows CVE-2023-22818 7.3 HighNovember 15, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more Authentication Bypass issue in My Cloud OS 5 devices CVE-2023-22814 10.0 CriticalJune 30, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices CVE-2023-22815 6.2 MediumJune 30, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more Limited Post-Authentication Remote Command Injection in My Cloud Products CVE-2023-22816 6.0 MediumJune 30, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +12 more +14 more Impersonation attack causing an Authentication Bypass on Western Digital devices CVE-2022-36331 10.0 CriticalJune 12, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +3 more +5 more Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices CVE-2022-36328 5.8 MediumMay 18, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +3 more +5 more Path traversal vulnerability leading to an arbitrary file write in Western Digital devices CVE-2022-36327 5.8 MediumMay 18, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +3 more +5 more Resource Exhaustion Vulnerability in Western Digital devices CVE-2022-36326 4.4 MediumMay 18, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more Server Side Request Forgery Vulnerability in Western Digital My Cloud Devices CVE-2022-29840 5.1 MediumMay 10, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more OS Command Injection vulnerability in Western Digital My Cloud devices CVE-2022-29841 8.0 HighMay 10, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more Command Injection Vulnerability in Western Digital My Cloud devices CVE-2022-29842 9.8 CriticalMay 10, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, westerndigital my cloud home duo firmware +2 more +4 more Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices CVE-2022-36329 4.4 MediumMay 10, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, westerndigital my cloud home duo firmware +2 more +4 more Buffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices CVE-2022-36330 1.9 LowMay 9, 2023
• sandisk ibi mobile app, ibi web app, western digital my cloud home mobile app +7 more +9 more Device API endpoint missing access controls on Western Digital Mobile and Web Apps CVE-2023-22813 3.3 LowMay 8, 2023
• sandisk privateaccess, westerndigital sandisk privateaccess +1 more SanDisk PrivateAccess Deprecated TLS protocol versions supported CVE-2023-22812 7.4 HighMarch 24, 2023
• westerndigital my cloud os Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade... CVE-2021-36226 9.8 CriticalFebruary 6, 2023
• westerndigital my cloud os Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as... CVE-2021-36225 8.8 HighFebruary 6, 2023
• westerndigital my cloud os Western Digital My Cloud devices before OS5 have a nobody account with a blank password. CVE-2021-36224 9.8 CriticalFebruary 6, 2023
• western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 more Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp CVE-2022-29844 EPSS 36.4% 6.7 MediumJanuary 25, 2023
• western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 more Western Digital My Cloud OS 5 devices Command Injection Vulnerability CVE-2022-29843 6.2 MediumJanuary 25, 2023
• western digital my cloud, westerndigital my cloud os +1 more Remote Backups Application Discloses Stored Credentials CVE-2022-29839 4.1 MediumDecember 9, 2022
• western digital my cloud, westerndigital my cloud os +1 more Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices CVE-2022-29838 4.3 MediumDecember 9, 2022
• sandisk ibi, western digital my cloud home, westerndigital my cloud home duo firmware +2 more +4 more Path traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices CVE-2022-29837 4.7 MediumDecember 1, 2022
• sandisk ibi, western digital my cloud home, westerndigital my cloud home duo firmware +2 more +4 more Post-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP API CVE-2022-29836 1.9 LowNovember 9, 2022
• sandisk ibi, western digital my cloud home, my cloud home duo +3 more +5 more Buffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi CVE-2022-23006 1.8 LowSeptember 27, 2022
• western digital wd discovery WD Discovery's Use of Weak Hashing Algorithm for Code Signing CVE-2022-29835 5.3 MediumSeptember 19, 2022
• western digital sweet b library, westerndigital sweet b +1 more Algorithm incorrectly returning error and Invalid unreduced value written to output buffer CVE-2022-23004 5.3 MediumJuly 29, 2022
• western digital sweet b library, westerndigital sweet b +1 more Shared secret or Point multiplication of NIST P-256 points with X coordinate of zero CVE-2022-23003 5.3 MediumJuly 29, 2022
• western digital sweet b library, westerndigital sweet b +1 more Point Compression/Decompression of NIST P-256 points with X coordinate of zero CVE-2022-23002 5.3 MediumJuly 29, 2022
• western digital sweet b library, westerndigital sweet b +1 more Sweet-B Library: Point compress/decompress using the wrong bit for sign CVE-2022-23001 5.3 MediumJuly 29, 2022
• western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 more Cross-site Scripting Vulnerability in USB Backups App CVE-2022-22999 8.2 HighJuly 25, 2022
• western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +7 more +9 more Weak Default SSL use in Port Forwarding Service CVE-2022-23000 7.3 HighJuly 25, 2022
• western digital my cloud home, westerndigital my cloud home duo firmware, my cloud home firmware +2 more Command Injection Vulnerability on My Cloud Home CVE-2022-22997 6.8 MediumJuly 12, 2022
• western digital my cloud home, westerndigital my cloud home duo firmware, my cloud home firmware +2 more Protecting AWS credentials stored in plaintext on My Cloud Home CVE-2022-22998 8.0 HighJuly 12, 2022
• sandisk professional g-raid 4/8 software utility, westerndigital sandisk professional g-raid 4\/8 software utility, sandisk professional g-raid 4\/8 software utility driver +2 more SanDisk Professional G-RAID 4/8 Software Utility, Privilege Escalation CVE-2022-22996 7.8 HighMarch 30, 2022
• netatalk, western digital my cloud, my cloud home +12 more +14 more Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk CVE-2022-22995 Fix available 10.0 CriticalMarch 25, 2022
• western digital my cloud, westerndigital my cloud os +1 more Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices. CVE-2022-22994 8.8 HighJanuary 28, 2022
• westerndigital my cloud os Command Injection Remote Code Execution vulnerability on Western Digital My Cloud devices. CVE-2022-22992 7.8 HighJanuary 28, 2022
• western digital my cloud, westerndigital my cloud os +1 more Limited Server-Side Request Forgery vulnerability on Western Digital My Cloud devices. CVE-2022-22993 7.8 HighJanuary 28, 2022
• western digital edgerover Insecure file and directory permissions on EdgeRover CVE-2022-22988 7.7 HighJanuary 13, 2022
• western digital my cloud, westerndigital my cloud os +1 more Limited authentication bypass vulnerability on Western Digital My Cloud devices CVE-2022-22990 7.8 HighJanuary 13, 2022
• western digital my cloud, westerndigital my cloud os +1 more Command injection through unsecured HTTP calls on Western Digital My Cloud devices CVE-2022-22991 7.8 HighJanuary 13, 2022
• western digital my cloud, westerndigital my cloud os +1 more Pre-authenticated stack overflow vulnerability on FTP Service CVE-2022-22989 9.8 CriticalJanuary 13, 2022
• westerndigital wd my book live duo firmware, wd my book live firmware +1 more Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an... CVE-2021-35941 EPSS 12.7% 7.5 HighJune 29, 2021
• westerndigital edgerover Western Digital EdgeRover before 0.25 has an escalation of privileges vulnerability where a low... CVE-2021-33205 8.8 HighJune 11, 2021
• Show olderLoading…