VendorsWestern Digitalmy_cloud_mirror_g2all versions
Vulnerabilities

Western Digital My Cloud Mirror G2 -

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

18CVEs
CVE-2023-22814
Authentication Bypass issue in My Cloud OS 5 devices
Published 2023-06-30 · Modified
10.0EPSS 0.007
CVE-2022-36331
Impersonation attack causing an Authentication Bypass on Western Digital devices
Published 2023-06-12 · Modified
10.0EPSS 0.006
CVE-2022-29844
Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp
Published 2023-01-25 · Modified
9.8EPSS 0.364
CVE-2022-29842
Command Injection Vulnerability in Western Digital My Cloud devices
Published 2023-05-10 · Modified
9.8EPSS 0.018
CVE-2022-36327
Path traversal vulnerability leading to an arbitrary file write in Western Digital devices
Published 2023-05-18 · Modified
9.8EPSS 0.015
CVE-2022-29841
OS Command Injection vulnerability in Western Digital My Cloud devices
Published 2023-05-10 · Modified
9.8EPSS 0.014
CVE-2022-29843
Western Digital My Cloud OS 5 devices Command Injection Vulnerability
Published 2023-01-25 · Modified
9.8EPSS 0.012
CVE-2023-22816
Limited Post-Authentication Remote Command Injection in My Cloud Products
Published 2023-06-30 · Modified
8.8EPSS 0.009
CVE-2022-22999
Cross-site Scripting Vulnerability in USB Backups App
Published 2022-07-25 · Modified
8.2EPSS 0.004
CVE-2022-23000
Weak Default SSL use in Port Forwarding Service
Published 2022-07-25 · Modified
7.8EPSS 0.002
CVE-2023-22815
Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices
Published 2023-06-30 · Modified
6.7EPSS 0.013
CVE-2022-36328
Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices
Published 2023-05-18 · Modified
5.8EPSS 0.008
CVE-2023-22817
Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
Published 2024-02-05 · Modified
5.5EPSS 0.002
CVE-2022-29839
Remote Backups Application Discloses Stored Credentials
Published 2022-12-09 · Modified
5.5EPSS 0.001
CVE-2022-29840
Server Side Request Forgery Vulnerability in Western Digital My Cloud Devices
Published 2023-05-10 · Modified
5.5EPSS 0.001
CVE-2023-22819
Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
Published 2024-02-05 · Modified
4.9EPSS 0.008
CVE-2022-36326
Resource Exhaustion Vulnerability in Western Digital devices
Published 2023-05-18 · Modified
4.9EPSS 0.006
CVE-2022-29838
Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices
Published 2022-12-09 · Modified
4.6EPSS 0.003