Latest vulnerabilities for vendor "westerndigital"

4.9

First published (updated )

CVE-2023-22819

Westerndigital My Cloud Pr2100 FirmwareServer-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products

5.5

First published (updated )

CVE-2023-22817

Westerndigital Sandisk Security InstallerMultiple DLL Search Order hijacking Vulnerabilities in SanDisk Security Installer for Windows

7.8

First published (updated )

CVE-2023-22818

Westerndigital My Cloud OsAuthentication Bypass issue in My Cloud OS 5 devices

First published (updated )

CVE-2023-22814

Westerndigital My Cloud OsPost-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices

6.7

First published (updated )

CVE-2023-22815

Never miss a vulnerability like this again

Westerndigital My Cloud OsLimited Post-Authentication Remote Command Injection in My Cloud Products

8.8

First published (updated )

CVE-2023-22816

Westerndigital My Cloud Pr2100 FirmwareImpersonation attack causing an Authentication Bypass on Western Digital devices

First published (updated )

CVE-2022-36331

Westerndigital My Cloud Os 5Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices

5.8

First published (updated )

CVE-2022-36328

Westerndigital My Cloud Os 5Path traversal vulnerability leading to an arbitrary file write in Western Digital devices

9.8

First published (updated )

CVE-2022-36327

Westerndigital My Cloud Os 5Resource Exhaustion Vulnerability in Western Digital devices

4.9

First published (updated )

CVE-2022-36326

Never miss a vulnerability like this again

Westerndigital My Cloud OsServer Side Request Forgery Vulnerability in Western Digital My Cloud Devices

5.5

First published (updated )

CVE-2022-29840

Westerndigital My Cloud OsOS Command Injection vulnerability in Western Digital My Cloud devices

9.8

First published (updated )

CVE-2022-29841

Westerndigital My Cloud OsCommand Injection Vulnerability in Western Digital My Cloud devices

9.8

First published (updated )

CVE-2022-29842

Westerndigital My Cloud Home FirmwareDenial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices

7.5

First published (updated )

CVE-2022-36329

Westerndigital My Cloud Home Duo FirmwareBuffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices

8.1

First published (updated )

CVE-2022-36330

Never miss a vulnerability like this again

Westerndigital My Cloud HomeInfoleak

4.3

First published (updated )

CVE-2023-22813

Westerndigital Sandisk PrivateaccessSanDisk PrivateAccess Deprecated TLS protocol versions supported

7.4

First published (updated )

CVE-2023-22812

Westerndigital My Cloud OsWestern Digital My Cloud devices before OS5 have a nobody account with a blank password.

9.8

First published (updated )

CVE-2021-36224

Westerndigital My Cloud OsWestern Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as dem…

8.8

First published (updated )

CVE-2021-36225

Westerndigital My Cloud OsWestern Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade fil…

9.8

First published (updated )

CVE-2021-36226

Never miss a vulnerability like this again

Westerndigital My Cloud Pr2100 FirmwareWestern Digital My Cloud OS 5 devices Command Injection Vulnerability

9.8

First published (updated )

CVE-2022-29843

Westerndigital My Cloud Pr2100 FirmwareWestern Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp

9.8

First published (updated )

CVE-2022-29844

Jedec Universal Flash StorageHost Boot ROM Code Vulnerability in Systems Implementing UFS Boot Feature

8.7

First published (updated )

CVE-2022-23005

Westerndigital My Cloud OsAuthentication issue with the encrypted volumes and auto mount feature in My Cloud devices

4.6

First published (updated )

CVE-2022-29838

Westerndigital My Cloud OsRemote Backups Application Discloses Stored Credentials

5.5

First published (updated )

CVE-2022-29839

Never miss a vulnerability like this again

Westerndigital My Cloud Home FirmwarePath traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices

7.8

First published (updated )

CVE-2022-29837

Westerndigital My Cloud Home FirmwarePost-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP API

4.3

First published (updated )

CVE-2022-29836

Westerndigital My Cloud Home FirmwareBuffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi

6.7

First published (updated )

CVE-2022-23006

Westerndigital Wd DiscoveryWD Discovery's Use of Weak Hashing Algorithm for Code Signing

5.3

First published (updated )

CVE-2022-29835

Westerndigital Sweet BAlgorithm incorrectly returning error and Invalid unreduced value written to output buffer

5.3

First published (updated )

CVE-2022-23004

Never miss a vulnerability like this again