Westerndigital My Cloud vulnerabilities

• western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +8 more +10 more Unchecked buffer in Dynamic DNS client CVE-2024-22170 9.2 CriticalSeptember 27, 2024
• sandisk ibi, western digital my cloud os 5, my cloud home & duo +12 more +14 more Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products CVE-2023-22819 4.9 MediumFebruary 5, 2024
• sandisk ibi, western digital my cloud os 5, my cloud home & duo +13 more +15 more Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products CVE-2023-22817 5.5 MediumFebruary 5, 2024
• western digital my cloud os 5, westerndigital my cloud os +1 more Authentication Bypass issue in My Cloud OS 5 devices CVE-2023-22814 10.0 CriticalJune 30, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices CVE-2023-22815 6.2 MediumJune 30, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more Limited Post-Authentication Remote Command Injection in My Cloud Products CVE-2023-22816 6.0 MediumJune 30, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +12 more +14 more Impersonation attack causing an Authentication Bypass on Western Digital devices CVE-2022-36331 10.0 CriticalJune 12, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +3 more +5 more Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices CVE-2022-36328 5.8 MediumMay 18, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +3 more +5 more Path traversal vulnerability leading to an arbitrary file write in Western Digital devices CVE-2022-36327 5.8 MediumMay 18, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +3 more +5 more Resource Exhaustion Vulnerability in Western Digital devices CVE-2022-36326 4.4 MediumMay 18, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more Server Side Request Forgery Vulnerability in Western Digital My Cloud Devices CVE-2022-29840 5.1 MediumMay 10, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more OS Command Injection vulnerability in Western Digital My Cloud devices CVE-2022-29841 8.0 HighMay 10, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more Command Injection Vulnerability in Western Digital My Cloud devices CVE-2022-29842 9.8 CriticalMay 10, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, westerndigital my cloud home duo firmware +2 more +4 more Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices CVE-2022-36329 4.4 MediumMay 10, 2023
• sandisk ibi, western digital my cloud home and my cloud home duo, westerndigital my cloud home duo firmware +2 more +4 more Buffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices CVE-2022-36330 1.9 LowMay 9, 2023
• sandisk ibi mobile app, ibi web app, western digital my cloud home mobile app +7 more +9 more Device API endpoint missing access controls on Western Digital Mobile and Web Apps CVE-2023-22813 3.3 LowMay 8, 2023
• westerndigital my cloud os Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade... CVE-2021-36226 9.8 CriticalFebruary 6, 2023
• westerndigital my cloud os Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as... CVE-2021-36225 8.8 HighFebruary 6, 2023
• westerndigital my cloud os Western Digital My Cloud devices before OS5 have a nobody account with a blank password. CVE-2021-36224 9.8 CriticalFebruary 6, 2023
• western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 more Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp CVE-2022-29844 EPSS 36.4% 6.7 MediumJanuary 25, 2023
• western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 more Western Digital My Cloud OS 5 devices Command Injection Vulnerability CVE-2022-29843 6.2 MediumJanuary 25, 2023
• western digital my cloud, westerndigital my cloud os +1 more Remote Backups Application Discloses Stored Credentials CVE-2022-29839 4.1 MediumDecember 9, 2022
• western digital my cloud, westerndigital my cloud os +1 more Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices CVE-2022-29838 4.3 MediumDecember 9, 2022
• sandisk ibi, western digital my cloud home, westerndigital my cloud home duo firmware +2 more +4 more Path traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices CVE-2022-29837 4.7 MediumDecember 1, 2022
• sandisk ibi, western digital my cloud home, westerndigital my cloud home duo firmware +2 more +4 more Post-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP API CVE-2022-29836 1.9 LowNovember 9, 2022
• sandisk ibi, western digital my cloud home, my cloud home duo +3 more +5 more Buffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi CVE-2022-23006 1.8 LowSeptember 27, 2022
• western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 more Cross-site Scripting Vulnerability in USB Backups App CVE-2022-22999 8.2 HighJuly 25, 2022
• western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +7 more +9 more Weak Default SSL use in Port Forwarding Service CVE-2022-23000 7.3 HighJuly 25, 2022
• western digital my cloud home, westerndigital my cloud home duo firmware, my cloud home firmware +2 more Command Injection Vulnerability on My Cloud Home CVE-2022-22997 6.8 MediumJuly 12, 2022
• western digital my cloud home, westerndigital my cloud home duo firmware, my cloud home firmware +2 more Protecting AWS credentials stored in plaintext on My Cloud Home CVE-2022-22998 8.0 HighJuly 12, 2022
• netatalk, western digital my cloud, my cloud home +12 more +14 more Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk CVE-2022-22995 Fix available 10.0 CriticalMarch 25, 2022
• western digital my cloud, westerndigital my cloud os +1 more Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices. CVE-2022-22994 8.8 HighJanuary 28, 2022
• westerndigital my cloud os Command Injection Remote Code Execution vulnerability on Western Digital My Cloud devices. CVE-2022-22992 7.8 HighJanuary 28, 2022
• western digital my cloud, westerndigital my cloud os +1 more Limited Server-Side Request Forgery vulnerability on Western Digital My Cloud devices. CVE-2022-22993 7.8 HighJanuary 28, 2022
• western digital my cloud, westerndigital my cloud os +1 more Limited authentication bypass vulnerability on Western Digital My Cloud devices CVE-2022-22990 7.8 HighJanuary 13, 2022
• western digital my cloud, westerndigital my cloud os +1 more Command injection through unsecured HTTP calls on Western Digital My Cloud devices CVE-2022-22991 7.8 HighJanuary 13, 2022
• western digital my cloud, westerndigital my cloud os +1 more Pre-authenticated stack overflow vulnerability on FTP Service CVE-2022-22989 9.8 CriticalJanuary 13, 2022
• westerndigital my cloud os Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB... CVE-2021-3310 Public exploit 7.8 HighMarch 10, 2021
• westerndigital my cloud os 5 An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118. A NAS Admin... CVE-2020-29563 9.8 CriticalDecember 11, 2020
• westerndigital my cloud os 5 An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin... CVE-2020-28970 9.8 CriticalDecember 1, 2020
• westerndigital my cloud os 5 On Western Digital My Cloud OS 5 devices before 5.06.115, the NAS Admin dashboard has an... CVE-2020-28940 9.8 CriticalDecember 1, 2020
• westerndigital my cloud os 5 An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin... CVE-2020-28971 9.8 CriticalDecember 1, 2020
• westerndigital my cloud firmware An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow... CVE-2020-27744 9.8 CriticalOctober 29, 2020
• westerndigital my cloud firmware Addressed remote code execution vulnerability in reg_device.php due to insufficient validation of... CVE-2020-25765 9.8 CriticalOctober 27, 2020
• westerndigital my cloud firmware Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization... CVE-2020-27159 9.8 CriticalOctober 27, 2020
• westerndigital my cloud firmware Addressed remote code execution vulnerability in cgi_api.php that allowed escalation of... CVE-2020-27158 9.8 CriticalOctober 27, 2020
• westerndigital my cloud firmware Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of... CVE-2020-27160 9.8 CriticalOctober 27, 2020
• westerndigital my cloud firmware Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry... CVE-2020-12830 9.8 CriticalOctober 27, 2020
• westerndigital ibi, my cloud home +1 more Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages. CVE-2020-10951 4.7 MediumApril 15, 2020
• westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware, my cloud ex2100 firmware +6 more +8 more Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100... CVE-2019-9949 8.8 HighMay 23, 2019
• Show olderLoading…