Western Digital My Cloud OS 5
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-22819 | < 5.27.161 | Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products | MEDIUM 4.9 | 0.8 % | ||
| CVE-2023-22817 | < 5.27.161 | Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-22814 | < 5.26.202 | Authentication Bypass issue in My Cloud OS 5 devices | CRITICAL 10.0 | 0.7 % | ||
| CVE-2023-22815 | < 5.26.300 | Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices | MEDIUM 6.7 | 1.3 % | ||
| CVE-2023-22816 | < 5.26.300 | Limited Post-Authentication Remote Command Injection in My Cloud Products | HIGH 8.8 | 0.9 % | ||
| CVE-2022-36331 | < 5.25.132 | Impersonation attack causing an Authentication Bypass on Western Digital devices | CRITICAL 10.0 | 0.6 % | ||
| CVE-2022-36328 | < 5.26.202 | Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices | MEDIUM 5.8 | 0.8 % | ||
| CVE-2022-36327 | < 5.26.202 | Path traversal vulnerability leading to an arbitrary file write in Western Digital devices | CRITICAL 9.8 | 1.5 % | ||
| CVE-2022-36326 | < 5.26.202 | Resource Exhaustion Vulnerability in Western Digital devices | MEDIUM 4.9 | 0.6 % | ||
| CVE-2022-29840 | < 5.26.202 | Server Side Request Forgery Vulnerability in Western Digital My Cloud Devices | MEDIUM 5.5 | 0.1 % | ||
| CVE-2022-29841 | < 5.26.119 | OS Command Injection vulnerability in Western Digital My Cloud devices | CRITICAL 9.8 | 1.4 % | ||
| CVE-2022-29842 | < 5.26.119 | Command Injection Vulnerability in Western Digital My Cloud devices | CRITICAL 9.8 | 1.8 % |