MC
Product
MY Cloud Mirror G2 Firmware
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 3Low 0
Watch
Add MY Cloud Mirror G2 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-29844 | 9.8 | Jan 26 | A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to read and write arbitrary files Affected: before 5.26.119 |
| CVE-2022-29843 | 9.8 | Jan 26 | A command injection vulnerability in the DDNS service configuration of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to… Affected: before 5.26.119 |
| CVE-2022-23000 | 7.8 | Jul 25 | The Western Digital My Cloud Web App [https://os5.mycloud.com/] uses a weak SSLContext when attempting to configure port forwarding rules Affected: before 5.23.114 |
| CVE-2022-36331 | 7.5 | Jun 12 | Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attack that could allow an unauthenticated attacker to gain… Affected: before 5.25.132 |
| CVE-2023-22817 | 5.5 | Feb 5 | Server-side request forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL using another DNS address to point back to the loopback… Affected: before 5.27.161 |
| CVE-2023-22819 | 4.9 | Feb 5 | An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the… Affected: before 5.27.161 |
| CVE-2022-22999 | 4.8 | Jul 25 | Western Digital My Cloud devices are vulnerable to a cross side scripting vulnerability that can allow a malicious user with elevated privileges access to drives being backed up… Affected: before 5.23.114 |
Showing 7