Read the docs

Westerndigital

Records82All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical31CVSS 9.0–10.0
CVSS high25CVSS 7.0–8.9

Exploited now

Westerndigital records in CISA KEV

No Westerndigital vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
My Cloud Os 18 records MEDIUM My Cloud Home Firmware 14 records MEDIUM My Cloud Home Duo Firmware 13 records MEDIUM My Cloud Firmware 12 records MEDIUM My Cloud Pr4100 Firmware 11 records HIGH Sandisk Ibi Firmware 11 records MEDIUM My Cloud Dl2100 Firmware 10 records HIGH My Cloud Dl4100 Firmware 10 records HIGH

Records

8 records in My Cloud Os 5 · all components

TI-2022-16674 CVE-2022-36327 · GHSA-w8xh-67qr-h5gr

Path traversal vulnerability leading to an arbitrary file write in Western Digital devices

Priority MEDIUM 45

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to write files to locations with certain critical filesystem types leading to remote code executio…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01466 Published 2023-05-18 Fixed in 9.4.0-191, 5.26.202 CWE-22
TI-2022-16675 CVE-2022-36328 · GHSA-5445-wchw-r2mr

Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices

Priority LOW 27

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to create arbitrary shares on arbitrary directories and exfiltrate sensitive files, passwords, use…

CVSS 3.1MEDIUM 5.8 Network High privileges No interaction EPSS 0.00767 Published 2023-05-18 Fixed in 9.4.0-191, 5.26.202 CWE-22
TI-2022-16673 CVE-2022-36326 · GHSA-mc85-9rqh-47wr

Resource Exhaustion Vulnerability in Western Digital devices

Priority LOW 23

An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being stopped and restarted was…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00572 Published 2023-05-18 Fixed in 9.4.0-191, 5.26.202 CWE-400
TI-2023-08980 CVE-2023-22813 · GHSA-775c-w7mp-r8gh

Device API endpoint missing access controls on Western Digital Mobile and Web Apps

Priority LOW 20

A device API endpoint was missing access controls on Western Digital My Cloud OS 5 iOS and Anroid Mobile Apps, My Cloud Home iOS and Android Mobile Apps, SanDisk ibi iOS and Android Mobile Apps, My Cloud OS 5 Web App, My…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00455 Published 2023-05-08 Fixed in 4.21.0, 4.26.0-6126 CWE-200
Open these records in search →