Login Request a demo
MC
Product
MY Cloud OS
by Westerndigital · last CVE Jun 30, 2023
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 8High 6Medium 4Low 0
Severity
All severities18Critical8High6Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MY Cloud OS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-22814
9.8
1%
Jun 30
Authentication Bypass issue in My Cloud OS 5 devices
Affected: 5.02.104 before 5.26.202
CVE-2022-29841
9.8
1%
May 10
OS Command Injection vulnerability in Western Digital My Cloud devices
Affected: 5.02.104 before 5.26.119
CVE-2022-29842
9.8
2%
May 10
Command Injection Vulnerability in Western Digital My Cloud devices
Affected: 5.02.104 before 5.26.119
CVE-2021-36224
9.8
1%
Feb 6
Western Digital My Cloud devices before OS5 have a nobody account with a blank password
Affected: before 5.02.104
CVE-2021-36226
9.8
1%
Feb 6
Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files
Affected: before 5.02.104
CVE-2022-22994
9.8
2%
Jan 28
A remote code execution vulnerability was discovered on Western Digital My Cloud devices where an attacker could trick a NAS device into loading through an unsecured HTTP call
Affected: before 5.19.117
CVE-2022-22992
9.8
2%
Jan 28
A command injection remote code execution vulnerability was discovered on Western Digital My Cloud Devices that could allow an attacker to execute arbitrary system commands on the…
Affected: before 5.19.117
CVE-2022-22989
9.8
1%
Jan 13
My Cloud OS 5 was vulnerable to a pre-authenticated stack overflow vulnerability on the FTP service that could be exploited by unauthenticated attackers on the network
Affected: before 5.19.117
Showing 8