Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Western Digital My Cloud Home and My Cloud Home Duo, My Cloud OS 5 5.26.202, 9.4.0-191 Clear all filters
TI-2022-16675 CVE-2022-36328 · GHSA-5445-wchw-r2mr

Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices

Priority LOW 27

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to create arbitrary shares on arbitrary directories and exfiltrate sensitive files, passwords, use…

CVSS 3.1MEDIUM 5.8 Network High privileges No interaction EPSS 0.00767 Published 2023-05-18 Fixed in 9.4.0-191, 5.26.202 CWE-22
TI-2022-16674 CVE-2022-36327 · GHSA-w8xh-67qr-h5gr

Path traversal vulnerability leading to an arbitrary file write in Western Digital devices

Priority MEDIUM 45

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to write files to locations with certain critical filesystem types leading to remote code executio…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01466 Published 2023-05-18 Fixed in 9.4.0-191, 5.26.202 CWE-22
TI-2022-16673 CVE-2022-36326 · GHSA-mc85-9rqh-47wr

Resource Exhaustion Vulnerability in Western Digital devices

Priority LOW 23

An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being stopped and restarted was…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00572 Published 2023-05-18 Fixed in 9.4.0-191, 5.26.202 CWE-400