SanDisk ibi
11 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-22819 | < 9.5.1-104 | Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products | MEDIUM 4.9 | 0.8 % | ||
| CVE-2023-22817 | < 9.5.1-104 | Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-36331 | < 8.13.1-102 | Impersonation attack causing an Authentication Bypass on Western Digital devices | CRITICAL 10.0 | 0.6 % | ||
| CVE-2022-36328 | < 9.4.0-191 | Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices | MEDIUM 5.8 | 0.8 % | ||
| CVE-2022-36327 | < 9.4.0-191 | Path traversal vulnerability leading to an arbitrary file write in Western Digital devices | CRITICAL 9.8 | 1.5 % | ||
| CVE-2022-36326 | < 9.4.0-191 | Resource Exhaustion Vulnerability in Western Digital devices | MEDIUM 4.9 | 0.6 % | ||
| CVE-2022-36329 | < 9.4.0-191 | Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices | HIGH 7.5 | 0.3 % | ||
| CVE-2022-36330 | < 9.4.0-191 | Buffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices | HIGH 8.1 | 0.6 % | ||
| CVE-2022-29837 | ibi – < 8.12.0-178 | Path traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices | HIGH 7.8 | 0.2 % | ||
| CVE-2022-29836 | ibi – < 8.11.0-113 | Post-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP API | MEDIUM 4.3 | 0.3 % | ||
| CVE-2022-23006 | 8.10.0-117 – < 8.10.0-117 | Buffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi | MEDIUM 6.7 | 0.3 % |