MC
Product
MY Cloud Home Firmware
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 5Medium 6Low 0
Watch
Add MY Cloud Home Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-23006 | 6.7 | Sep 27 | A stack-based buffer overflow vulnerability was found on Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi that could allow an attacker accessing the system… Affected: before 8.10.0-117 |
| CVE-2023-22817 | 5.5 | Feb 5 | Server-side request forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL using another DNS address to point back to the loopback… Affected: before 9.5.1-104 |
| CVE-2023-22819 | 4.9 | Feb 5 | An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the… Affected: before 9.5.1-104 |
| CVE-2022-36328 | 4.9 | May 18 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to create arbitrary shares on arbitrary directories and… Affected: before 9.4.0-191 |
| CVE-2022-36326 | 4.9 | May 18 | An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the… Affected: before 9.4.0-191 |
| CVE-2022-29836 | 4.3 | Nov 9 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability was discovered via an HTTP API on Western Digital My Cloud Home; My Cloud Home Duo;… Affected: before 8.11.0-113 |
Showing 6