Latest vulnerabilities for vendor "western digital"

Western Digital WD DiscoveryDLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allow…

Risk 78

Severity

8.9

First published (updated )

CVE-2025-30248

BleepingComputerCritical WD My Cloud bug allows remote command injection

First published (updated )

News

BleepingComputer

Western Digital My CloudOS Command Injection, Command Injection

Risk 88

Severity

9.3

First published (updated )

CVE-2025-30247

Western Digital KitfoxWestern Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows servi…

Risk 67

Severity

8.4

First published (updated )

CVE-2025-57699

Western Digital My CloudUnchecked buffer in Dynamic DNS client

Risk 76

Severity

9.2

First published (updated )

CVE-2024-22170

Western Digital MyCloud PR4100Western Digital MyCloud PR4100 ddns-start Heap-based Buffer Overflow Remote Code Execution Vulnerability

Risk 23

First published (updated )

Advisory

ZDI-24-1294

Western Digital MyCloud PR4100ZDI-24-1294: Western Digital MyCloud PR4100 ddns-start Heap-based Buffer Overflow Remote Code Execution Vulnerability

Risk 23

First published (updated )

ZDI-CAN-22537

Western Digital WD DiscoveryMisconfiguration in node.js causing a code execution in WD Discovery

Risk 65

Severity

7.1

First published (updated )

CVE-2024-22169

Western Digital My CloudCross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps

Risk 35

Severity

5.9

First published (updated )

CVE-2024-22168

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 RESTSDK Uncontrolled Resource Consumption Denial-of-Service Vulnerability

Risk 23

First published (updated )

Advisory

ZDI-24-088

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 RESTSDK Server-Side Request Forgery Vulnerability

Risk 23

First published (updated )

Advisory

ZDI-24-087

Western Digital MyCloud PR4100ZDI-24-087: (Pwn2Own) Western Digital MyCloud PR4100 RESTSDK Server-Side Request Forgery Vulnerability

Risk 23

First published (updated )

ZDI-CAN-22456

Western Digital MyCloud PR4100ZDI-24-088: (Pwn2Own) Western Digital MyCloud PR4100 RESTSDK Uncontrolled Resource Consumption Denial-of-Service Vulnerability

Risk 23

First published (updated )

ZDI-CAN-22440

Western Digital MyCloud PR4100Western Digital MyCloud PR4100 REST SDK Use of Potentially Dangerous Function Remote Code Execution Vulnerability

Risk 50

First published (updated )

Advisory

ZDI-23-1053

Western Digital MyCloud PR4100Western Digital MyCloud PR4100 CGI API Command Injection Remote Code Execution Vulnerability

Risk 50

First published (updated )

Advisory

ZDI-23-1051

Western Digital MyCloud PR4100Western Digital MyCloud PR4100 Logger Class Command Injection Remote Code Execution Vulnerability

Risk 51

First published (updated )

Advisory

ZDI-23-1052

Western Digital MyCloud PR4100ZDI-23-1053: Western Digital MyCloud PR4100 REST SDK Use of Potentially Dangerous Function Remote Code Execution Vulnerability

Risk 45

First published (updated )

ZDI-CAN-19746

Western Digital MyCloud PR4100ZDI-23-1051: Western Digital MyCloud PR4100 CGI API Command Injection Remote Code Execution Vulnerability

Risk 50

First published (updated )

ZDI-CAN-19678

Western Digital MyCloud PR4100ZDI-23-1052: Western Digital MyCloud PR4100 Logger Class Command Injection Remote Code Execution Vulnerability

Risk 45

First published (updated )

ZDI-CAN-19745

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 do_reboot Command Injection Remote Code Execution Vulnerability

Risk 72

First published (updated )

Advisory

ZDI-23-849

Western Digital MyCloud PR4100ZDI-23-849: (Pwn2Own) Western Digital MyCloud PR4100 do_reboot Command Injection Remote Code Execution Vulnerability

Risk 72

First published (updated )

ZDI-CAN-19607

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 Authentication Bypass Vulnerability

Risk 40

First published (updated )

Advisory

ZDI-23-847

Western Digital MyCloud PR4100ZDI-23-847: (Pwn2Own) Western Digital MyCloud PR4100 Authentication Bypass Vulnerability

Risk 40

First published (updated )

ZDI-CAN-19861

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 Information Disclosure Vulnerability

Risk 53

First published (updated )

Advisory

ZDI-23-846

Western Digital MyCloud PR4100ZDI-23-846: (Pwn2Own) Western Digital MyCloud PR4100 Information Disclosure Vulnerability

Risk 41

First published (updated )

ZDI-CAN-19860

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 RESTSDK Uncontrolled Resource Consumption Denial-of-Service Vulnerability

Risk 41

First published (updated )

Advisory

ZDI-23-851

Western Digital MyCloud PR4100ZDI-23-851: (Pwn2Own) Western Digital MyCloud PR4100 RESTSDK Uncontrolled Resource Consumption Denial-of-Service Vulnerability

Risk 41

First published (updated )

ZDI-CAN-19856

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 restsdk Directory Traversal Arbitrary File Read and Write Vulnerability

Risk 66

First published (updated )

Advisory

ZDI-23-848

Western Digital MyCloud PR4100ZDI-23-848: (Pwn2Own) Western Digital MyCloud PR4100 restsdk Directory Traversal Arbitrary File Read and Write Vulnerability

Risk 66

First published (updated )

ZDI-CAN-19862

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 account_mgr Command Injection Remote Code Execution Vulnerability

Risk 89

First published (updated )

Advisory

ZDI-23-852

Trending

Vendor Risk Score

Software

Western Digital WD DiscoveryDLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allow…

BleepingComputerCritical WD My Cloud bug allows remote command injection

Western Digital My CloudOS Command Injection, Command Injection

Western Digital KitfoxWestern Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows servi…

Western Digital My CloudUnchecked buffer in Dynamic DNS client

Don't miss critical vulnerabilities

Western Digital MyCloud PR4100Western Digital MyCloud PR4100 ddns-start Heap-based Buffer Overflow Remote Code Execution Vulnerability

Western Digital MyCloud PR4100ZDI-24-1294: Western Digital MyCloud PR4100 ddns-start Heap-based Buffer Overflow Remote Code Execution Vulnerability

Western Digital WD DiscoveryMisconfiguration in node.js causing a code execution in WD Discovery

Western Digital My CloudCross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 RESTSDK Uncontrolled Resource Consumption Denial-of-Service Vulnerability

Don't miss critical vulnerabilities

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 RESTSDK Server-Side Request Forgery Vulnerability

Western Digital MyCloud PR4100ZDI-24-087: (Pwn2Own) Western Digital MyCloud PR4100 RESTSDK Server-Side Request Forgery Vulnerability

Western Digital MyCloud PR4100ZDI-24-088: (Pwn2Own) Western Digital MyCloud PR4100 RESTSDK Uncontrolled Resource Consumption Denial-of-Service Vulnerability

Western Digital MyCloud PR4100Western Digital MyCloud PR4100 REST SDK Use of Potentially Dangerous Function Remote Code Execution Vulnerability

Western Digital MyCloud PR4100Western Digital MyCloud PR4100 CGI API Command Injection Remote Code Execution Vulnerability

Don't miss critical vulnerabilities

Western Digital MyCloud PR4100Western Digital MyCloud PR4100 Logger Class Command Injection Remote Code Execution Vulnerability

Western Digital MyCloud PR4100ZDI-23-1053: Western Digital MyCloud PR4100 REST SDK Use of Potentially Dangerous Function Remote Code Execution Vulnerability

Western Digital MyCloud PR4100ZDI-23-1051: Western Digital MyCloud PR4100 CGI API Command Injection Remote Code Execution Vulnerability

Western Digital MyCloud PR4100ZDI-23-1052: Western Digital MyCloud PR4100 Logger Class Command Injection Remote Code Execution Vulnerability

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 do_reboot Command Injection Remote Code Execution Vulnerability

Don't miss critical vulnerabilities

Western Digital MyCloud PR4100ZDI-23-849: (Pwn2Own) Western Digital MyCloud PR4100 do_reboot Command Injection Remote Code Execution Vulnerability

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 Authentication Bypass Vulnerability

Western Digital MyCloud PR4100ZDI-23-847: (Pwn2Own) Western Digital MyCloud PR4100 Authentication Bypass Vulnerability

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 Information Disclosure Vulnerability

Western Digital MyCloud PR4100ZDI-23-846: (Pwn2Own) Western Digital MyCloud PR4100 Information Disclosure Vulnerability

Don't miss critical vulnerabilities

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 RESTSDK Uncontrolled Resource Consumption Denial-of-Service Vulnerability

Western Digital MyCloud PR4100ZDI-23-851: (Pwn2Own) Western Digital MyCloud PR4100 RESTSDK Uncontrolled Resource Consumption Denial-of-Service Vulnerability

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 restsdk Directory Traversal Arbitrary File Read and Write Vulnerability

Western Digital MyCloud PR4100ZDI-23-848: (Pwn2Own) Western Digital MyCloud PR4100 restsdk Directory Traversal Arbitrary File Read and Write Vulnerability

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 account_mgr Command Injection Remote Code Execution Vulnerability

Don't miss critical vulnerabilities

Company

Resources

Contact