VendorsWestern Digitalmy_cloud_home_firmwareall versions
Vulnerabilities

Western Digital My Cloud Home Firmware

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

14CVEs
CVE-2022-22995
Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk
Published 2022-03-25 · Modified
10.0EPSS 0.028
CVE-2022-36331
Impersonation attack causing an Authentication Bypass on Western Digital devices
Published 2023-06-12 · Modified
10.0EPSS 0.006
CVE-2022-22997
Command Injection Vulnerability on My Cloud Home
Published 2022-07-12 · Modified
9.8EPSS 0.015
CVE-2022-36327
Path traversal vulnerability leading to an arbitrary file write in Western Digital devices
Published 2023-05-18 · Modified
9.8EPSS 0.015
CVE-2022-36330
Buffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices
Published 2023-05-09 · Modified
8.1EPSS 0.006
CVE-2022-22998
Protecting AWS credentials stored in plaintext on My Cloud Home
Published 2022-07-12 · Modified
8.0EPSS 0.008
CVE-2022-29837
Path traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices
Published 2022-12-01 · Modified
7.8EPSS 0.002
CVE-2022-36329
Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices
Published 2023-05-10 · Modified
7.5EPSS 0.003
CVE-2022-23006
Buffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi
Published 2022-09-27 · Modified
6.7EPSS 0.003
CVE-2022-36328
Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices
Published 2023-05-18 · Modified
5.8EPSS 0.008
CVE-2023-22817
Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
Published 2024-02-05 · Modified
5.5EPSS 0.002
CVE-2023-22819
Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
Published 2024-02-05 · Modified
4.9EPSS 0.008
CVE-2022-36326
Resource Exhaustion Vulnerability in Western Digital devices
Published 2023-05-18 · Modified
4.9EPSS 0.006
CVE-2022-29836
Post-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP API
Published 2022-11-09 · Modified
4.3EPSS 0.003