VendorsWestern Digitalwd_cloudall versions
Vulnerabilities

Western Digital WD Cloud

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

20CVEs
CVE-2022-22995
Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk
Published 2022-03-25 · Modified
10.0EPSS 0.028
CVE-2022-22992
Command Injection Remote Code Execution vulnerability on Western Digital My Cloud devices.
Published 2022-01-28 · Modified
10.0EPSS 0.023
CVE-2023-22814
Authentication Bypass issue in My Cloud OS 5 devices
Published 2023-06-30 · Modified
10.0EPSS 0.007
CVE-2022-22994
Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices.
Published 2022-01-28 · Modified
9.8EPSS 0.019
CVE-2022-29842
Command Injection Vulnerability in Western Digital My Cloud devices
Published 2023-05-10 · Modified
9.8EPSS 0.018
CVE-2022-36327
Path traversal vulnerability leading to an arbitrary file write in Western Digital devices
Published 2023-05-18 · Modified
9.8EPSS 0.015
CVE-2022-29841
OS Command Injection vulnerability in Western Digital My Cloud devices
Published 2023-05-10 · Modified
9.8EPSS 0.014
CVE-2022-22989
Pre-authenticated stack overflow vulnerability on FTP Service
Published 2022-01-13 · Modified
9.8EPSS 0.013
CVE-2022-22990
Limited authentication bypass vulnerability on Western Digital My Cloud devices
Published 2022-01-13 · Modified
8.8EPSS 0.021
CVE-2022-22991
Command injection through unsecured HTTP calls on Western Digital My Cloud devices
Published 2022-01-13 · Modified
8.8EPSS 0.013
CVE-2023-22816
Limited Post-Authentication Remote Command Injection in My Cloud Products
Published 2023-06-30 · Modified
8.8EPSS 0.009
CVE-2022-22993
Limited Server-Side Request Forgery vulnerability on Western Digital My Cloud devices.
Published 2022-01-28 · Modified
8.8EPSS 0.008
CVE-2023-22815
Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices
Published 2023-06-30 · Modified
6.7EPSS 0.013
CVE-2022-36328
Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices
Published 2023-05-18 · Modified
5.8EPSS 0.008
CVE-2023-22817
Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
Published 2024-02-05 · Modified
5.5EPSS 0.002
CVE-2022-29840
Server Side Request Forgery Vulnerability in Western Digital My Cloud Devices
Published 2023-05-10 · Modified
5.5EPSS 0.001
CVE-2022-29839
Remote Backups Application Discloses Stored Credentials
Published 2022-12-09 · Modified
5.5EPSS 0.001
CVE-2023-22819
Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
Published 2024-02-05 · Modified
4.9EPSS 0.008
CVE-2022-36326
Resource Exhaustion Vulnerability in Western Digital devices
Published 2023-05-18 · Modified
4.9EPSS 0.006
CVE-2022-29838
Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices
Published 2022-12-09 · Modified
4.6EPSS 0.003