Skip to contentWesterndigital vulnerabilities
Products
Show 23 moreShow less
Newest
- westerndigital armorlockThe iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store...CVE-2021-286536.5 Medium
- westerndigital my cloud osWestern Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB...CVE-2021-3310Public exploit7.8 High
- westerndigital my cloud os 5An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118. A NAS Admin...CVE-2020-295639.8 Critical
- westerndigital dashboardWestern Digital Dashboard before 3.2.2.9 allows DLL Hijacking that leads to compromise of the...CVE-2020-296547.8 High
- westerndigital my cloud os 5An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin...CVE-2020-289709.8 Critical
- westerndigital my cloud os 5On Western Digital My Cloud OS 5 devices before 5.06.115, the NAS Admin dashboard has an...CVE-2020-289409.8 Critical
- westerndigital my cloud os 5An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin...CVE-2020-289719.8 Critical
- trustedfirmware op-tee, westerndigital inand cl em132 firmware, inand ix em132 firmware +1 more +3 moreWestern Digital iNAND devices through 2020-06-03 allow Authentication Bypass via a capture-replay...CVE-2020-137996.8 Medium
- westerndigital my cloud firmwareAn issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow...CVE-2020-277449.8 Critical
- westerndigital my cloud firmwareAddressed remote code execution vulnerability in reg_device.php due to insufficient validation of...CVE-2020-257659.8 Critical
- westerndigital my cloud firmwareAddressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization...CVE-2020-271599.8 Critical
- westerndigital my cloud firmwareAddressed remote code execution vulnerability in cgi_api.php that allowed escalation of...CVE-2020-271589.8 Critical
- westerndigital my cloud firmwareAddressed remote code execution vulnerability in AvailableApps.php that allowed escalation of...CVE-2020-271609.8 Critical
- westerndigital my cloud firmwareAddressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry...CVE-2020-128309.8 Critical
- westerndigital wd discoveryIn Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard...CVE-2020-158168.8 High
- westerndigital wd discoveryThe Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS...CVE-2020-124278.8 High
- westerndigital ibi, my cloud home +1 moreWestern Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages.CVE-2020-109514.7 Medium
- westerndigital sandisk x600 sd9sb8w-128g firmware, sandisk x600 sd9sb8w-1t00 firmware, sandisk x600 sd9sb8w-256g firmware +17 more +19 moreWestern Digital SanDisk X600 devices in certain configurations, a vulnerability in the access...CVE-2019-107057.5 High
- westerndigital sandisk x300 sd7sb6s-128g firmware, sandisk x300 sd7sb6s-256g firmware, sandisk x300 sd7sb7s-010t firmware +56 more +58 moreWestern Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update...CVE-2019-107066.3 Medium
- westerndigital sandisk x300 sd7sb6s-128g firmware, sandisk x300 sd7sb6s-256g firmware, sandisk x300 sd7sb7s-010t firmware +56 more +58 moreWestern Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling...CVE-2019-116865.5 Medium
- westerndigital mycloud.comWestern Digital mycloud.com before Web Version 2.2.0-134 allows XSS.CVE-2020-89606.1 Medium
- westerndigital westerndigitalssddashboardsetup.exe, sandiskssddashboardsetup.exe +1 moreWestern Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hijacking.CVE-2020-89597.8 High
- sandisk ssd dashboardDescription: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1...CVE-2019-134675.9 Medium
- sandisk ssd dashboardWestern Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have...CVE-2019-134667.5 High
- westerndigital wd my book firmwareWestern Digital WD My Book World through II 1.02.12 suffers from Broken Authentication, which...CVE-2019-16399Public exploit9.8 Critical
- westerndigital my book live firmwareWestern Digital WD My Book Live (all versions) has a root Remote Command Execution bug via shell...CVE-2018-18472EPSS 30.3%9.8 Critical
- westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware, my cloud ex2100 firmware +6 more +8 moreWestern Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100...CVE-2019-99498.8 High
- westerndigital my cloud pr4100 firmware, my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 moreWestern Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud...CVE-2019-99509.8 Critical
- hcl software mycloud, westerndigital my cloud +1 moreThere is a security vulnerability which could lead to Factory Reset Protection (FRP) bypass in...CVE-2018-79284.6 Medium
- western digital tv live hub, tv media player, westerndigital tv live hub firmware +1 more +3 moreThe web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow...CVE-2018-11519.8 Critical
- westerndigital my cloud firmwareWestern Digital WD My Cloud v04.05.00-320 devices embed the session token (aka PHPSESSID) in...CVE-2018-91489.8 Critical
- westerndigital my cloud pr4100 firmwareAn issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web...CVE-2017-17560Public exploitEPSS 73.4%9.8 Critical
- westerndigital wd my cloudThe WD My Cloud (aka com.wdc.wd2go) application 4.0.0 for Android does not verify X.509...CVE-2014-58765.4 Medium
- westerndigital arkeia virtual appliance firmwareDirectory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual...CVE-2014-2846Public exploit7.5 High
- westerndigital my net n750, my net n900, my net n900c +2 moremain_internet.php on the Western Digital My Net N600 and N750 with firmware 1.03.12 and 1.04.16,...CVE-2013-5006Public exploit4.3 Medium