Advisories · Technology

Western Digital My Cloud Home.

Every CVE that names Western Digital My Cloud Home among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-29837 CVE record

CVSS 4.7 Medium

Path traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices
- Western Digital My Cloud Home
- SanDisk ibi
- Path traversal
Not analysed yet 1 Dec 2022
CVE-2022-29836 CVE record

CVSS 1.9 Low

Post-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP API
- Western Digital My Cloud Home
- SanDisk ibi
- Path traversal
Not analysed yet 9 Nov 2022
CVE-2022-23006 CVE record

CVSS 1.8 Low

Buffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi
- Western Digital My Cloud Home
- Western Digital My Cloud Home Duo
- Memory corruption
Not analysed yet 27 Sept 2022
CVE-2022-22997 CVE record

CVSS 6.8 Medium

Command Injection Vulnerability on My Cloud Home
- Western Digital My Cloud Home
- Command injection
Not analysed yet 12 Jul 2022
CVE-2022-22998 CVE record

CVSS 8.0 High

Protecting AWS credentials stored in plaintext on My Cloud Home
- Western Digital My Cloud Home
- Hard-coded credentials
Not analysed yet 12 Jul 2022
CVE-2022-22995 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk
- Western Digital My Cloud
- Western Digital My Cloud Home
- Path traversal
Not analysed yet 25 Mar 2022