Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: Westerndigital Component: My Cloud Os 5 Clear all filters
TI-2022-16675 CVE-2022-36328 · GHSA-5445-wchw-r2mr

Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices

Priority LOW 27

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to create arbitrary shares on arbitrary directories and exfiltrate sensitive files, passwords, use…

CVSS 3.1MEDIUM 5.8 Network High privileges No interaction EPSS 0.00767 Published 2023-05-18 Fixed in 9.4.0-191, 5.26.202 CWE-22
TI-2022-16674 CVE-2022-36327 · GHSA-w8xh-67qr-h5gr

Path traversal vulnerability leading to an arbitrary file write in Western Digital devices

Priority MEDIUM 45

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to write files to locations with certain critical filesystem types leading to remote code executio…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01466 Published 2023-05-18 Fixed in 9.4.0-191, 5.26.202 CWE-22
TI-2022-16673 CVE-2022-36326 · GHSA-mc85-9rqh-47wr

Resource Exhaustion Vulnerability in Western Digital devices

Priority LOW 23

An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being stopped and restarted was…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00572 Published 2023-05-18 Fixed in 9.4.0-191, 5.26.202 CWE-400
TI-2023-08980 CVE-2023-22813 · GHSA-775c-w7mp-r8gh

Device API endpoint missing access controls on Western Digital Mobile and Web Apps

Priority LOW 20

A device API endpoint was missing access controls on Western Digital My Cloud OS 5 iOS and Anroid Mobile Apps, My Cloud Home iOS and Android Mobile Apps, SanDisk ibi iOS and Android Mobile Apps, My Cloud OS 5 Web App, My…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00455 Published 2023-05-08 Fixed in 4.21.0, 4.26.0-6126 CWE-200