MC
Product
MY Cloud OS
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 6Medium 4Low 0
Watch
Add MY Cloud OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-22816 | 8.8 | Jun 30 | A post-authentication remote command injection vulnerability in a CGI file in Western Digital My Cloud OS 5 devices that could allow an attacker to build files with redirects and… Affected: before 5.26.300 |
| CVE-2021-36225 | 8.8 | Feb 6 | Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API commands for firmware uploads and installation Affected: before 5.02.104 |
| CVE-2022-22993 | 8.8 | Jan 28 | A limited SSRF vulnerability was discovered on Western Digital My Cloud devices that could allow an attacker to impersonate a server and reach any page on the server by bypassing… Affected: before 5.19.117 |
| CVE-2022-22991 | 8.8 | Jan 13 | A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call Affected: before 5.19.117 |
| CVE-2022-22990 | 8.8 | Jan 13 | A limited authentication bypass vulnerability was discovered that could allow an attacker to achieve remote code execution and escalate privileges on the My Cloud devices Affected: before 5.19.117 |
| CVE-2021-3310 | 7.8 | Mar 10 | Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares Affected: before 5.10.122 |
Showing 6