Western Digital My Cloud Home
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-29837 | My Cloud Home – < 8.12.0-178 ; My Cloud Home Duo – < 8.12.0-178 | Path traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices | HIGH 7.8 | 0.2 % | ||
| CVE-2022-29836 | My Cloud Home – < 8.11.0-113 ; My Cloud Home Duo – < 8.11.0-113 | Post-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP API | MEDIUM 4.3 | 0.3 % | ||
| CVE-2022-23006 | 8.10.0-117 – < 8.10.0-117 | Buffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi | MEDIUM 6.7 | 0.3 % | ||
| CVE-2022-22997 | My Cloud Home Firmware – < 8.5.1-102 | Command Injection Vulnerability on My Cloud Home | CRITICAL 9.8 | 1.5 % | ||
| CVE-2022-22998 | My Cloud Home Firmware – < 8.5.1-102 | Protecting AWS credentials stored in plaintext on My Cloud Home | HIGH 8.0 | 0.8 % | ||
| CVE-2022-22995 | My Cloud Home – < 7.16-220 | Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk | CRITICAL 10.0 | 2.7 % |