Western Digital My Cloud Home
6 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-29837 | My Cloud Home – < 8.12.0-178 ; My Cloud Home Duo – < 8.12.0-178 | Path traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices | HIGH 7.8 | 0.2 % | ||
| CVE-2022-29836 | My Cloud Home – < 8.11.0-113 ; My Cloud Home Duo – < 8.11.0-113 | Post-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP API | MEDIUM 4.3 | 0.3 % | ||
| CVE-2022-23006 | 8.10.0-117 – < 8.10.0-117 | Buffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi | MEDIUM 6.7 | 0.3 % | ||
| CVE-2022-22997 | My Cloud Home Firmware – < 8.5.1-102 | Command Injection Vulnerability on My Cloud Home | CRITICAL 9.8 | 1.5 % | ||
| CVE-2022-22998 | My Cloud Home Firmware – < 8.5.1-102 | Protecting AWS credentials stored in plaintext on My Cloud Home | HIGH 8.0 | 0.8 % | ||
| CVE-2022-22995 | My Cloud Home – < 7.16-220 | Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk | CRITICAL 10.0 | 2.7 % |