MC
Product
MY Cloud OS 5
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 0Medium 3Low 0
Watch
Add MY Cloud OS 5 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-36327 | 9.8 | May 18 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to write files to locations with certain critical… Affected: before 5.26.202 |
| CVE-2020-29563 | 9.8 | Dec 12 | An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118 Affected: before 5.07.118 |
| CVE-2020-28971 | 9.8 | Dec 1 | An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115 Affected: before 5.06.115 |
| CVE-2020-28970 | 9.8 | Dec 1 | An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115 Affected: before 5.06.115 |
| CVE-2020-28940 | 9.8 | Dec 1 | On Western Digital My Cloud OS 5 devices before 5.06.115, the NAS Admin dashboard has an authentication bypass vulnerability that could allow an unauthenticated user to execute… Affected: before 5.06.115 |
| CVE-2022-36328 | 4.9 | May 18 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to create arbitrary shares on arbitrary directories and… Affected: before 5.26.202 |
| CVE-2022-36326 | 4.9 | May 18 | An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the… Affected: before 5.26.202 |
| CVE-2023-22813 | 4.3 | May 8 | A device API endpoint was missing access controls on Western Digital My Cloud OS 5 iOS and Anroid Mobile Apps, My Cloud Home iOS and Android Mobile Apps, SanDisk ibi iOS and… Affected: before 4.21.0; before 4.21.0 |
Showing 8
