Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: SanDisk ibi 9.5.1-104 Clear all filters
TI-2023-08986 CVE-2023-22819 · GHSA-4m5c-7v8f-8p2q

Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products

Priority LOW 24

An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being stopped and restarted was…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00822 Published 2024-02-05 Fixed in 5.27.161, 9.5.1-104 CWE-770
TI-2023-08984 CVE-2023-22817 · GHSA-ff78-2q7q-3gpw

Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products

Priority LOW 24

Server-side request forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL using another DNS address to point back to the loopback adapter.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00241 Published 2024-02-05 Fixed in 5.27.161, 9.5.1-104 CWE-918