MC
Product
MY Cloud OS 5
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 1Medium 3Low 0
Watch
Add MY Cloud OS 5 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-22814 | 9.8 | Jun 30 | Authentication Bypass issue in My Cloud OS 5 devices Affected: before 5.26.202 |
| CVE-2022-36327 | 9.8 | May 18 | Path traversal vulnerability leading to an arbitrary file write in Western Digital devices Affected: before 5.26.202 |
| CVE-2020-29563 | 9.8 | Dec 12 | An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118 Affected: before 5.07.118 |
| CVE-2020-28971 | 9.8 | Dec 1 | An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115 Affected: before 5.06.115 |
| CVE-2020-28970 | 9.8 | Dec 1 | An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115 Affected: before 5.06.115 |
| CVE-2020-28940 | 9.8 | Dec 1 | On Western Digital My Cloud OS 5 devices before 5.06.115, the NAS Admin dashboard has an authentication bypass vulnerability that could allow an unauthenticated user to execute… Affected: before 5.06.115 |
| CVE-2023-22816 | 8.8 | Jun 30 | Limited Post-Authentication Remote Command Injection in My Cloud Products Affected: before 5.26.300; before 5.26.300 |
| CVE-2022-36328 | 4.9 | May 18 | Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices Affected: before 5.26.202 |
| CVE-2022-36326 | 4.9 | May 18 | Resource Exhaustion Vulnerability in Western Digital devices Affected: before 5.26.202 |
| CVE-2023-22813 | 4.3 | May 8 | Device API endpoint missing access controls on Western Digital Mobile and Web Apps Affected: before 4.21.0; before 4.21.0 |
Showing 10
