Western Digital My Cloud
14 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-30247 | < 5.31.108 | An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remot | CRITICAL 9.3 | 1.1 % | ||
| CVE-2024-22170 | < 5.29.102 | Unchecked buffer in Dynamic DNS client | CRITICAL 9.2 | 0.5 % | ||
| CVE-2022-29844 | My Cloud OS 5 – < 5.26.119 | Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp | CRITICAL 9.8 | 36 % | ||
| CVE-2022-29843 | My Cloud OS 5 – < 5.26.119 | Western Digital My Cloud OS 5 devices Command Injection Vulnerability | CRITICAL 9.8 | 1.2 % | ||
| CVE-2022-29839 | My Cloud – < 5.25.124 | Remote Backups Application Discloses Stored Credentials | MEDIUM 5.5 | 0.1 % | ||
| CVE-2022-29838 | My Cloud – < 5.25.124 | Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices | MEDIUM 4.6 | 0.3 % | ||
| CVE-2022-22999 | My Cloud OS 5 – < 5.23.114 | Cross-site Scripting Vulnerability in USB Backups App | HIGH 8.2 | 0.4 % | ||
| CVE-2022-23000 | My Cloud OS 5 – < 5.23.114 | Weak Default SSL use in Port Forwarding Service | HIGH 7.8 | 0.2 % | ||
| CVE-2022-22995 | My Cloud OS 5 – < 5.19.117 | Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk | CRITICAL 10.0 | 2.7 % | ||
| CVE-2022-22994 | My Cloud OS 5 – < 5.19.117 | Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices. | CRITICAL 9.8 | 1.9 % | ||
| CVE-2022-22993 | My Cloud OS 5 – < 5.19.117 | Limited Server-Side Request Forgery vulnerability on Western Digital My Cloud devices. | HIGH 8.8 | 0.8 % | ||
| CVE-2022-22990 | My Cloud OS 5 – < 5.19.117 | Limited authentication bypass vulnerability on Western Digital My Cloud devices | HIGH 8.8 | 2.1 % | ||
| CVE-2022-22991 | My Cloud OS 5 – < 5.19.117 | Command injection through unsecured HTTP calls on Western Digital My Cloud devices | HIGH 8.8 | 1.3 % | ||
| CVE-2022-22989 | My Cloud OS 5 – < 5.19.117 | Pre-authenticated stack overflow vulnerability on FTP Service | CRITICAL 9.8 | 1.3 % |