Vulnerabilities

TI-2022-12204 CVE-2022-29844 · GHSA-6r45-66xq-p89w

Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp

HIGH 68

A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to read and write arbitrary files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.36405 Published 2023-01-25 Fixed in 5.26.119 CWE-23

TI-2022-12203 CVE-2022-29843 · GHSA-f3c6-qvcg-m7qv

Western Digital My Cloud OS 5 devices Command Injection Vulnerability

MEDIUM 45

A command injection vulnerability in the DDNS service configuration of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to execute code in the context of the root user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01218 Published 2023-01-25 Fixed in 5.26.119 CWE-78

Vulnerabilities

Filters

Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp

Western Digital My Cloud OS 5 devices Command Injection Vulnerability