Advisories · Technology

SanDisk ibi.

Every CVE that names SanDisk ibi among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-22819 CVE record

CVSS 4.9 Medium

Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
- Western Digital My Cloud OS 5
- Western Digital My Cloud Home & Duo
- Denial of service
Not analysed yet 5 Feb 2024
CVE-2023-22817 CVE record

CVSS 5.5 Medium

Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
- Western Digital My Cloud OS 5
- Western Digital My Cloud Home & Duo
- Server-side request forgery (SSRF)
Not analysed yet 5 Feb 2024
CVE-2022-36331 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Impersonation attack causing an Authentication Bypass on Western Digital devices
- Western Digital My Cloud OS 5
- Western Digital My Cloud Home and My Cloud Home Duo
- Authentication bypass
Not analysed yet 12 Jun 2023
CVE-2022-36328 CVE record

CVSS 5.8 Medium

Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices
- Western Digital My Cloud Home and My Cloud Home Duo
- SanDisk ibi
- Path traversal
Not analysed yet 18 May 2023
CVE-2022-36327 CVE record

CVSS 5.8 Medium

Path traversal vulnerability leading to an arbitrary file write in Western Digital devices
- Western Digital My Cloud Home and My Cloud Home Duo
- SanDisk ibi
- Path traversal
Not analysed yet 18 May 2023
CVE-2022-36326 CVE record

CVSS 4.4 Medium

Resource Exhaustion Vulnerability in Western Digital devices
- Western Digital My Cloud Home and My Cloud Home Duo
- SanDisk ibi
- Denial of service
Not analysed yet 18 May 2023
CVE-2022-36329 CVE record

CVSS 4.4 Medium

Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices
- Western Digital My Cloud Home and My Cloud Home Duo
- SanDisk ibi
- Denial of service
Not analysed yet 10 May 2023
CVE-2022-36330 CVE record

CVSS 1.9 Low

Buffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices
- Western Digital My Cloud Home and My Cloud Home Duo
- SanDisk ibi
- Memory corruption
Not analysed yet 9 May 2023
CVE-2022-29837 CVE record

CVSS 4.7 Medium

Path traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices
- Western Digital My Cloud Home
- SanDisk ibi
- Path traversal
Not analysed yet 1 Dec 2022
CVE-2022-29836 CVE record

CVSS 1.9 Low

Post-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP API
- Western Digital My Cloud Home
- SanDisk ibi
- Path traversal
Not analysed yet 9 Nov 2022
CVE-2022-23006 CVE record

CVSS 1.8 Low

Buffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi
- Western Digital My Cloud Home
- Western Digital My Cloud Home Duo
- Memory corruption
Not analysed yet 27 Sept 2022