Latest vulnerabilities for vendor "westerndigital"

4.9

First published (updated )

CVE-2023-22819

Westerndigital My Cloud Pr2100 FirmwareServer-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products

5.5

First published (updated )

CVE-2023-22817

Westerndigital Sandisk Security InstallerMultiple DLL Search Order hijacking Vulnerabilities in SanDisk Security Installer for Windows

7.8

First published (updated )

CVE-2023-22818

Westerndigital My Cloud OsCVE-2023-22814

First published (updated )

CVE-2023-22814

Westerndigital My Cloud OsPost-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices

6.7

First published (updated )

CVE-2023-22815

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Westerndigital My Cloud OsLimited Post-Authentication Remote Command Injection in My Cloud Products

8.8

First published (updated )

CVE-2023-22816

Westerndigital My Cloud Pr2100 FirmwareImpersonation attack causing an Authentication Bypass on Western Digital devices

10

First published (updated )

CVE-2022-36331

Westerndigital My Cloud Os 5Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices

5.8

First published (updated )

CVE-2022-36328

Westerndigital My Cloud Os 5Path traversal vulnerability leading to an arbitrary file write in Western Digital devices

9.8

First published (updated )

CVE-2022-36327

Westerndigital My Cloud Os 5Resource Exhaustion Vulnerability in Western Digital devices

4.9

First published (updated )

CVE-2022-36326

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Westerndigital My Cloud OsServer Side Request Forgery Vulnerability in Western Digital My Cloud Devices

5.5

First published (updated )

CVE-2022-29840

Westerndigital My Cloud OsOS Command Injection vulnerability in Western Digital My Cloud devices

9.8

First published (updated )

CVE-2022-29841

Westerndigital My Cloud OsCommand Injection Vulnerability in Western Digital My Cloud devices

9.8

First published (updated )

CVE-2022-29842

Westerndigital My Cloud Home FirmwareDenial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices

7.5

First published (updated )

CVE-2022-36329

Westerndigital My Cloud Home Duo FirmwareBuffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices

8.1

First published (updated )

CVE-2022-36330

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Westerndigital My Cloud HomeInfoleak

4.3

First published (updated )

CVE-2023-22813

Westerndigital Sandisk PrivateaccessSanDisk PrivateAccess Deprecated TLS protocol versions supported

7.4

First published (updated )

CVE-2023-22812

Westerndigital My Cloud OsWestern Digital My Cloud devices before OS5 have a nobody account with a blank password.

9.8

First published (updated )

CVE-2021-36224

Westerndigital My Cloud OsWestern Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as dem…

8.8

First published (updated )

CVE-2021-36225

Westerndigital My Cloud OsWestern Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade fil…

9.8

First published (updated )

CVE-2021-36226

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Westerndigital My Cloud Pr2100 FirmwareWestern Digital My Cloud OS 5 devices Command Injection Vulnerability

9.8

First published (updated )

CVE-2022-29843

Westerndigital My Cloud Pr2100 FirmwareWestern Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp

9.8

First published (updated )

CVE-2022-29844

Jedec Universal Flash StorageHost Boot ROM Code Vulnerability in Systems Implementing UFS Boot Feature

8.7

First published (updated )

CVE-2022-23005

Westerndigital My Cloud OsAuthentication issue with the encrypted volumes and auto mount feature in My Cloud devices

4.6

First published (updated )

CVE-2022-29838

Westerndigital My Cloud OsRemote Backups Application Discloses Stored Credentials

5.5

First published (updated )

CVE-2022-29839

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Westerndigital My Cloud Home FirmwarePath traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices

7.8

First published (updated )

CVE-2022-29837

Westerndigital My Cloud Home FirmwarePost-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP API

4.3

First published (updated )

CVE-2022-29836

Westerndigital My Cloud Home FirmwareBuffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi

6.7

First published (updated )

CVE-2022-23006

Westerndigital Wd DiscoveryWD Discovery's Use of Weak Hashing Algorithm for Code Signing

5.3

First published (updated )

CVE-2022-29835

Westerndigital Sweet BAlgorithm incorrectly returning error and Invalid unreduced value written to output buffer

5.3

First published (updated )

CVE-2022-23004

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Westerndigital Sweet BShared secret or Point multiplication of NIST P-256 points with X coordinate of zero

5.3

First published (updated )

CVE-2022-23003

Westerndigital Sweet BPoint Compression/Decompression of NIST P-256 points with X coordinate of zero

5.3

First published (updated )

CVE-2022-23002

Westerndigital Sweet BSweet-B Library: Point compress/decompress using the wrong bit for sign

5.3

First published (updated )

CVE-2022-23001

Westerndigital My Cloud Pr2100 FirmwareCross-site Scripting Vulnerability in USB Backups App

8.2

First published (updated )

CVE-2022-22999

Westerndigital My Cloud Pr2100 FirmwareWeak Default SSL use in Port Forwarding Service

7.8

First published (updated )

CVE-2022-23000

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Westerndigital My Cloud Home Duo FirmwareCommand Injection Vulnerability on My Cloud Home

9.8

First published (updated )

CVE-2022-22997

Westerndigital My Cloud Home Duo FirmwareProtecting AWS credentials stored in plaintext on My Cloud Home

8

First published (updated )

CVE-2022-22998

Westerndigital Sandisk Professional G-raid 4\/8 Software UtilitySanDisk Professional G-RAID 4/8 Software Utility, Privilege Escalation

7.8

First published (updated )

CVE-2022-22996

Fedoraproject FedoraWestern Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk

10

First published (updated )

CVE-2022-22995

Westerndigital My Cloud Os(Pwn2Own) Western Digital My Cloud Pro Series PR4100 ConnectivityService Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability

9.8

First published (updated )

CVE-2022-22994

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 cloudAccess Command Injection Remote Code Execution Vulnerability

10

First published (updated )

CVE-2022-22992

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 cgi_api Server-Side Request Forgery Privilege Escalation Vulnerability

8.8

First published (updated )

CVE-2022-22993

Westerndigital EdgeroverInsecure file and directory permissions on EdgeRover

9.1

First published (updated )

CVE-2022-22988

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 nasAdmin Authentication Bypass Vulnerability

8.8

First published (updated )

CVE-2022-22990

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 ConnectivityService Command Injection Remote Code Execution Vulnerability

8.8

First published (updated )

CVE-2022-22991

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Westerndigital My Cloud OsPre-authenticated stack overflow vulnerability on FTP Service

9.8

First published (updated )

CVE-2022-22989

Westerndigital Wd My Book Live FirmwareWestern Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an admin…

7.5

First published (updated )

CVE-2021-35941

Westerndigital EdgeroverWestern Digital EdgeRover before 0.25 has an escalation of privileges vulnerability where a low priv…

8.8

First published (updated )

CVE-2021-33205

CVE-2021-28653The iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store ke…

6.5

First published (updated )

CVE-2021-28653

Westerndigital My Cloud OsWestern Digital MyCloud PR4100 Link Resolution Information Disclosure Vulnerability

7.8

First published (updated )

CVE-2021-3310

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.