Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Western Digital My Cloud OS 5 5.26.119 Clear all filters
TI-2022-12201 CVE-2022-29841 · GHSA-39gv-q5r7-jg94

OS Command Injection vulnerability in Western Digital My Cloud devices

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that was caused by a command that read files from a privileged location and created a system command without saniti…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01428 Published 2023-05-10 Fixed in 5.26.119 CWE-78
TI-2022-12202 CVE-2022-29842 · GHSA-jgf2-qhgr-gp37

Command Injection Vulnerability in Western Digital My Cloud devices

Priority MEDIUM 52

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability that could allow an attacker to execute code in the context of the root user on a vulnerable CGI file was discovered in We…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01769 Published 2023-05-10 Fixed in 5.26.119 CWE-77