Login Request a demo
MC
Product
MY Cloud OS
by Westerndigital · last CVE Jul 1, 2023
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 8High 6Medium 4Low 0
Severity
All severities18Critical8High6Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MY Cloud OS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-22815
6.7
1%
Jun 30
Post-authentication remote command injection vulnerability in Western Digital My Cloud OS 5 devices that could allow an attacker to execute code in the context of the root user on…
Affected: before 5.26.300
CVE-2022-29840
5.5
0%
May 10
Server-Side Request Forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL to point back to the loopback adapter was addressed in…
Affected: 5.02.104 before 5.26.202
CVE-2022-29839
5.5
0%
Dec 9
Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices that could allow an attacker who has gained access to a…
Affected: before 5.25.124
CVE-2022-29838
4.6
0%
Dec 9
Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devices allows insecure direct access to the drive information…
Affected: before 5.25.124
Showing 4