Western Digital My Cloud Home and My Cloud Home Duo
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-36331 | < 8.13.1-102 | Impersonation attack causing an Authentication Bypass on Western Digital devices | CRITICAL 10.0 | 0.6 % | ||
| CVE-2022-36328 | < 9.4.0-191 | Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices | MEDIUM 5.8 | 0.8 % | ||
| CVE-2022-36327 | < 9.4.0-191 | Path traversal vulnerability leading to an arbitrary file write in Western Digital devices | CRITICAL 9.8 | 1.5 % | ||
| CVE-2022-36326 | < 9.4.0-191 | Resource Exhaustion Vulnerability in Western Digital devices | MEDIUM 4.9 | 0.6 % | ||
| CVE-2022-36329 | < 9.4.0-191 | Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices | HIGH 7.5 | 0.3 % | ||
| CVE-2022-36330 | < 9.4.0-191 | Buffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices | HIGH 8.1 | 0.6 % |