Login Request a demo
WD
Vendor
Western Digital
21 products with CVEs on record
35
CVEs
0
On KEV
0
New 30D
Products
MC
MY Cloud Ex2 Ultra Firmware
Western Digital
9.8
5 CVEs0 on KEV0 new
MC
My Cloud
Western Digital
9.3
2 CVEs0 on KEV0 new
MC
MY Cloud Dl2100
Western Digital
9.8
2 CVEs0 on KEV0 new
MC
MY Cloud Dl4100 Firmware
Western Digital
9.8
2 CVEs0 on KEV0 new
MC
MY Cloud Ex2100 Firmware
Western Digital
9.8
2 CVEs0 on KEV0 new
MC
MY Cloud Ex4100
Western Digital
9.8
2 CVEs0 on KEV0 new
MC
MY Cloud Mirror Gen 2 Firmware
Western Digital
9.8
2 CVEs0 on KEV0 new
MC
MY Cloud Pr2100 Firmware
Western Digital
9.8
2 CVEs0 on KEV0 new
MC
MY Cloud Pr4100
Western Digital
9.8
2 CVEs0 on KEV0 new
MN
Mycloud Nas
Western Digital
9.8
2 CVEs0 on KEV0 new
WD
WD Discovery
Western Digital
8.9
2 CVEs0 on KEV0 new
IB
Ibi
Western Digital
9.1
1 CVEs0 on KEV0 new
MC
MY Cloud Ex2 Firmware
Western Digital
9.8
1 CVEs0 on KEV0 new
MC
MY Cloud Ex4 Firmware
Western Digital
9.8
1 CVEs0 on KEV0 new
MC
MY Cloud Firmware
Western Digital
9.8
1 CVEs0 on KEV0 new
MC
MY Cloud Home
Western Digital
9.1
1 CVEs0 on KEV0 new
MC
My Cloud Home web app
Western Digital
5.9
1 CVEs0 on KEV0 new
MC
MY Cloud Mirror Firmware
Western Digital
9.8
1 CVEs0 on KEV0 new
MC
MY Cloud Wdbctl0020hwt Firmware
Western Digital
9.8
1 CVEs0 on KEV0 new
MC
My Cloud web app
Western Digital
5.9
1 CVEs0 on KEV0 new
WC
WD Cloud web app
Western Digital
5.9
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-30248
WD
WD Discovery
Western Digital
8.9
1%
Jan 26DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary code via placement of a crafted dll in…
CVE-2025-30247
MC
My Cloud
Western Digital
9.3
1%
Sep 29An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system…
CVE-2024-22170
MC
My Cloud
Western Digital
9.2
0%
Sep 27Unchecked buffer in Dynamic DNS client
CVE-2024-22169
WD
WD Discovery
Western Digital
7.1
0%
Aug 2Misconfiguration in node.js causing a code execution in WD Discovery
CVE-2024-22168
MC
My Cloud web app
Western Digital
5.9
0%
Jun 24Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps
CVE-2020-8990
IB
Ibi
Western Digital
9.1
1%
Feb 20Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation
CVE-2019-18931
MC
MY Cloud Ex2 Ultra Firmware
Western Digital
8.8
2%
Nov 13Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters
CVE-2019-18930
MC
MY Cloud Ex2 Ultra Firmware
Western Digital
8.8
3%
Nov 13Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a stack-based buffer overflow
CVE-2019-18929
MC
MY Cloud Ex2 Ultra Firmware
Western Digital
8.8
3%
Nov 13Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mgr.cgi stack-based buffer…
CVE-2019-9951
MC
MY Cloud Dl4100 Firmware
Western Digital
9.8
2%
Apr 24Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100…
CVE-2018-17153
MC
MY Cloud Pr4100
Western Digital
9.8
87%
Sep 18It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability
CVE-2016-10108
MN
Mycloud Nas
Western Digital
9.8
98%
Jan 3Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data
CVE-2016-10107
MN
Mycloud Nas
Western Digital
9.8
11%
Jan 3Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie header