Filters

Software

westerndigital my cloud pr4100
26
westerndigital my cloud ex4100
23
westerndigital my cloud pr2100
23
westerndigital my cloud ex2 ultra
18
westerndigital my cloud dl2100
13
westerndigital my cloud dl4100
13
westerndigital my cloud ex2100
13
westerndigital my cloud
12
westerndigital my cloud firmware
11
westerndigital my cloud mirror gen 2
8
westerndigital my cloud os
8
westerndigital wd cloud
8
westerndigital my cloud mirror g2
7
westerndigital my cloud pr4100 firmware
7
westerndigital my cloud dl2100 firmware
6
westerndigital my cloud dl4100 firmware
6
westerndigital my cloud ex2 ultra firmware
6
westerndigital my cloud ex2100 firmware
6
westerndigital my cloud ex4100 firmware
6
westerndigital my cloud pr2100 firmware
6
westerndigital my cloud expert series ex2
5
westerndigital my cloud mirror - gen 2
5
westerndigital my cloud os 5
5
westerndigital my cloud home
4
westerndigital my cloud home firmware
4
westerndigital my cloud home duo
3
westerndigital my cloud home duo firmware
3
westerndigital my cloud mirror g2 firmware
3
westerndigital my cloud mirror gen2
3
westerndigital my cloud mirror gen2 firmware
2
westerndigital sandisk ibi
2
westerndigital sandisk ibi firmware
2
westerndigital edgerover
1
westerndigital my book live
1
westerndigital my book live firmware
1
westerndigital my cloud mirror gen 2 firmware
1
westerndigital tv live hub
1
westerndigital tv live hub firmware
1
westerndigital tv media player
1
westerndigital tv media player firmware
1
westerndigital wd cloud firmware
1
westerndigital wd my book
1
westerndigital wd my book firmware
1

Westerndigital My Cloud OsCVE-2023-22814

First published (updated )
CVE-2023-22814

Westerndigital My Cloud Pr2100 FirmwareImpersonation attack causing an Authentication Bypass on Western Digital devices

critical
10
First published (updated )
CVE-2022-36331

Westerndigital My Cloud Os 5Path traversal vulnerability leading to an arbitrary file write in Western Digital devices

critical
9.8
First published (updated )
CVE-2022-36327

Westerndigital My Cloud OsOS Command Injection vulnerability in Western Digital My Cloud devices

critical
9.8
First published (updated )
CVE-2022-29841

Westerndigital My Cloud OsCommand Injection Vulnerability in Western Digital My Cloud devices

critical
9.8
First published (updated )
CVE-2022-29842

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Westerndigital My Cloud OsWestern Digital My Cloud devices before OS5 have a nobody account with a blank password.

critical
9.8
First published (updated )
CVE-2021-36224

Westerndigital My Cloud OsWestern Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade fil…

critical
9.8
First published (updated )
CVE-2021-36226

Westerndigital My Cloud Pr2100 FirmwareWestern Digital My Cloud OS 5 devices Command Injection Vulnerability

critical
9.8
First published (updated )
CVE-2022-29843

Westerndigital My Cloud Pr2100 FirmwareWestern Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp

critical
9.8
First published (updated )
CVE-2022-29844

Westerndigital My Cloud Home Duo FirmwareCommand Injection Vulnerability on My Cloud Home

critical
9.8
First published (updated )
CVE-2022-22997

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Fedoraproject FedoraWestern Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk

critical
10
First published (updated )
CVE-2022-22995

Westerndigital My Cloud Os(Pwn2Own) Western Digital My Cloud Pro Series PR4100 ConnectivityService Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability

critical
9.8
First published (updated )
CVE-2022-22994

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 cloudAccess Command Injection Remote Code Execution Vulnerability

critical
10
First published (updated )
CVE-2022-22992

Westerndigital EdgeroverInsecure file and directory permissions on EdgeRover

critical
9.1
First published (updated )
CVE-2022-22988

Westerndigital My Cloud OsPre-authenticated stack overflow vulnerability on FTP Service

critical
9.8
First published (updated )
CVE-2022-22989

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Westerndigital My Cloud Os 5(Pwn2Own) Western Digital MyCloud PR4100 nasAdmin Incorrect Authorization Authentication Bypass Vulnerability

critical
9.8
First published (updated )
CVE-2020-29563

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 nasAdmin Incorrect Authorization Authentication Bypass Vulnerability

critical
9.8
First published (updated )
CVE-2020-28970

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 nasAdmin Authentication Bypass Vulnerability

critical
9.8
First published (updated )
CVE-2020-28940

Western Digital MyCloud PR4100(Pwn2Own) Western Digital MyCloud PR4100 nasAdmin Authentication Bypass Vulnerability

critical
9.8
First published (updated )
CVE-2020-28971

Westerndigital My Cloud FirmwareOS Command Injection

critical
10
First published (updated )
CVE-2020-27744

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Westerndigital My Cloud FirmwareInput Validation, OS Command Injection

critical
10
First published (updated )
CVE-2020-25765

Westerndigital My Cloud FirmwareOS Command Injection

critical
10
First published (updated )
CVE-2020-27159

Westerndigital My Cloud FirmwareOS Command Injection

critical
10
First published (updated )
CVE-2020-27158

Westerndigital My Cloud FirmwarePath Traversal

critical
9.8
First published (updated )
CVE-2020-27160

Westerndigital My Cloud FirmwareBuffer Overflow

critical
9.8
First published (updated )
CVE-2020-12830

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Westerndigital Wd My Book FirmwareWestern Digital WD My Book World through II 1.02.12 suffers from Broken Authentication, which allows…

critical
9.8
First published (updated )
CVE-2019-16399

Westerndigital My Book Live FirmwareOS Command Injection

critical
10
First published (updated )
CVE-2018-18472

Westerndigital My Cloud FirmwareWestern Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and P…

critical
9
First published (updated )
CVE-2019-9949

Westerndigital My Cloud FirmwareWestern Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100…

critical
9.8
First published (updated )
CVE-2019-9950

Westerndigital Tv Live Hub FirmwareBuffer Overflow

critical
10
First published (updated )
CVE-2018-1151

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Westerndigital My Cloud FirmwareWestern Digital WD My Cloud v04.05.00-320 devices embed the session token (aka PHPSESSID) in filenam…

critical
9.8
First published (updated )
CVE-2018-9148

Westerndigital My Cloud Pr4100 FirmwareAn issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration c…

critical
10
First published (updated )
CVE-2017-17560

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203