Advisories · Technology

Western Digital My Cloud Home and My Cloud Home Duo.

Every CVE that names Western Digital My Cloud Home and My Cloud Home Duo among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-36331 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Impersonation attack causing an Authentication Bypass on Western Digital devices
- Western Digital My Cloud OS 5
- Western Digital My Cloud Home and My Cloud Home Duo
- Authentication bypass
Not analysed yet 12 Jun 2023
CVE-2022-36328 CVE record

CVSS 5.8 Medium

Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices
- Western Digital My Cloud Home and My Cloud Home Duo
- SanDisk ibi
- Path traversal
Not analysed yet 18 May 2023
CVE-2022-36327 CVE record

CVSS 5.8 Medium

Path traversal vulnerability leading to an arbitrary file write in Western Digital devices
- Western Digital My Cloud Home and My Cloud Home Duo
- SanDisk ibi
- Path traversal
Not analysed yet 18 May 2023
CVE-2022-36326 CVE record

CVSS 4.4 Medium

Resource Exhaustion Vulnerability in Western Digital devices
- Western Digital My Cloud Home and My Cloud Home Duo
- SanDisk ibi
- Denial of service
Not analysed yet 18 May 2023
CVE-2022-36329 CVE record

CVSS 4.4 Medium

Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices
- Western Digital My Cloud Home and My Cloud Home Duo
- SanDisk ibi
- Denial of service
Not analysed yet 10 May 2023
CVE-2022-36330 CVE record

CVSS 1.9 Low

Buffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices
- Western Digital My Cloud Home and My Cloud Home Duo
- SanDisk ibi
- Memory corruption
Not analysed yet 9 May 2023