Advisories · Technology

Western Digital My Cloud OS 5.

Every CVE that names Western Digital My Cloud OS 5 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-22819 CVE record

CVSS 4.9 Medium

Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
- Western Digital My Cloud OS 5
- Western Digital My Cloud Home & Duo
- Denial of service
Not analysed yet 5 Feb 2024
CVE-2023-22817 CVE record

CVSS 5.5 Medium

Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
- Western Digital My Cloud OS 5
- Western Digital My Cloud Home & Duo
- Server-side request forgery (SSRF)
Not analysed yet 5 Feb 2024
CVE-2023-22814 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Authentication Bypass issue in My Cloud OS 5 devices
- Western Digital My Cloud OS 5
- Authentication bypass
Not analysed yet 30 Jun 2023
CVE-2023-22815 CVE record

CVSS 6.2 Medium

Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices
- Western Digital My Cloud OS 5
- Command injection
Not analysed yet 30 Jun 2023
CVE-2023-22816 CVE record

CVSS 6.0 Medium

Limited Post-Authentication Remote Command Injection in My Cloud Products
- Western Digital My Cloud OS 5
- Command injection
Not analysed yet 30 Jun 2023
CVE-2022-36331 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Impersonation attack causing an Authentication Bypass on Western Digital devices
- Western Digital My Cloud OS 5
- Western Digital My Cloud Home and My Cloud Home Duo
- Authentication bypass
Not analysed yet 12 Jun 2023
CVE-2022-36328 CVE record

CVSS 5.8 Medium

Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices
- Western Digital My Cloud Home and My Cloud Home Duo
- SanDisk ibi
- Path traversal
Not analysed yet 18 May 2023
CVE-2022-36327 CVE record

CVSS 5.8 Medium

Path traversal vulnerability leading to an arbitrary file write in Western Digital devices
- Western Digital My Cloud Home and My Cloud Home Duo
- SanDisk ibi
- Path traversal
Not analysed yet 18 May 2023
CVE-2022-36326 CVE record

CVSS 4.4 Medium

Resource Exhaustion Vulnerability in Western Digital devices
- Western Digital My Cloud Home and My Cloud Home Duo
- SanDisk ibi
- Denial of service
Not analysed yet 18 May 2023
CVE-2022-29840 CVE record

CVSS 5.1 Medium

Server Side Request Forgery Vulnerability in Western Digital My Cloud Devices
- Western Digital My Cloud OS 5
- Server-side request forgery (SSRF)
Not analysed yet 10 May 2023
CVE-2022-29841 CVE record

CVSS 8.0 High

OS Command Injection vulnerability in Western Digital My Cloud devices
- Western Digital My Cloud OS 5
- Command injection
Not analysed yet 10 May 2023
CVE-2022-29842 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Command Injection Vulnerability in Western Digital My Cloud devices
- Western Digital My Cloud OS 5
- Command injection
Not analysed yet 10 May 2023