MC
Product
MY Cloud Home Firmware
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 5Medium 6Low 0
Watch
Add MY Cloud Home Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-36327 | 9.8 | May 18 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to write files to locations with certain critical… Affected: before 9.4.0-191 |
| CVE-2022-22997 | 9.8 | Jul 12 | Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 bucket that potentially allowed an attacker to execute… Affected: before 8.5.1-102 |
| CVE-2022-22995 | 9.8 | Mar 25 | The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files Affected: before 7.16-220 |
| CVE-2022-36330 | 8.1 | May 10 | A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My Cloud Home, My… Affected: before 9.4.0-191 |
| CVE-2022-29837 | 7.8 | Dec 1 | A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which could allow an attacker to initiate installation of custom… Affected: before 8.12.0-178 |
| CVE-2022-36331 | 7.5 | Jun 12 | Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attack that could allow an unauthenticated attacker to gain… Affected: before 8.13.1-102 |
| CVE-2022-36329 | 7.5 | May 10 | An improper privilege management issue that could allow an attacker to cause a denial of service over the OTA mechanism was discovered in Western Digital My Cloud Home, My Cloud… Affected: before 9.4.0-191 |
| CVE-2022-22998 | 7.5 | Jul 12 | Implemented protections on AWS credentials that were not properly protected Affected: before 8.5.1-102 |
| CVE-2022-23006 | 6.7 | Sep 27 | A stack-based buffer overflow vulnerability was found on Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi that could allow an attacker accessing the system… Affected: before 8.10.0-117 |
| CVE-2023-22817 | 5.5 | Feb 5 | Server-side request forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL using another DNS address to point back to the loopback… Affected: before 9.5.1-104 |
| CVE-2023-22819 | 4.9 | Feb 5 | An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the… Affected: before 9.5.1-104 |
| CVE-2022-36328 | 4.9 | May 18 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to create arbitrary shares on arbitrary directories and… Affected: before 9.4.0-191 |
| CVE-2022-36326 | 4.9 | May 18 | An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the… Affected: before 9.4.0-191 |
| CVE-2022-29836 | 4.3 | Nov 9 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability was discovered via an HTTP API on Western Digital My Cloud Home; My Cloud Home Duo;… Affected: before 8.11.0-113 |
Showing 14