WD
Vendor
Western Digital
61
CVEs
0
On KEV
0
New 30D
Products
MC9.8
My Cloud OS 5
Western Digital
12 CVEs0 on KEV0 new
MC9.8
My Cloud Home and My Cloud Home Duo
Western Digital
6 CVEs0 on KEV0 new
MC9.8
MY Cloud Ex2 Ultra Firmware
Western Digital
5 CVEs0 on KEV0 new
MC9.8
My Cloud
Western Digital
4 CVEs0 on KEV0 new
MC9.8
MY Cloud Dl2100
Western Digital
2 CVEs0 on KEV0 new
MC9.8
MY Cloud Dl4100 Firmware
Western Digital
2 CVEs0 on KEV0 new
MC9.8
MY Cloud Ex2100 Firmware
Western Digital
2 CVEs0 on KEV0 new
MC9.8
MY Cloud Ex4100
Western Digital
2 CVEs0 on KEV0 new
MC5.5
My Cloud Home & Duo
Western Digital
2 CVEs0 on KEV0 new
MC5.9
My Cloud Home web app
Western Digital
2 CVEs0 on KEV0 new
MC9.8
MY Cloud Mirror Gen 2 Firmware
Western Digital
2 CVEs0 on KEV0 new
MC9.8
MY Cloud Pr2100 Firmware
Western Digital
2 CVEs0 on KEV0 new
MC9.8
MY Cloud Pr4100
Western Digital
2 CVEs0 on KEV0 new
MN9.8
Mycloud Nas
Western Digital
2 CVEs0 on KEV0 new
WD8.9
WD Discovery
Western Digital
2 CVEs0 on KEV0 new
IB9.1
Ibi
Western Digital
1 CVEs0 on KEV0 new
MC9.8
MY Cloud Ex2 Firmware
Western Digital
1 CVEs0 on KEV0 new
MC9.8
MY Cloud Ex4 Firmware
Western Digital
1 CVEs0 on KEV0 new
MC9.8
MY Cloud Firmware
Western Digital
1 CVEs0 on KEV0 new
MC9.1
MY Cloud Home
Western Digital
1 CVEs0 on KEV0 new
MC4.3
My Cloud Home Mobile App
Western Digital
1 CVEs0 on KEV0 new
MC9.8
MY Cloud Mirror Firmware
Western Digital
1 CVEs0 on KEV0 new
MC4.3
My Cloud OS 5 Mobile App
Western Digital
1 CVEs0 on KEV0 new
MC4.3
My Cloud OS 5 Web App
Western Digital
1 CVEs0 on KEV0 new
MC9.8
MY Cloud Wdbctl0020hwt Firmware
Western Digital
1 CVEs0 on KEV0 new
MC5.9
My Cloud web app
Western Digital
1 CVEs0 on KEV0 new
WC5.9
WD Cloud web app
Western Digital
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-30248 | WD WD Discovery Western Digital | 8.9 | Jan 26 | DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary code via placement of a crafted dll in… |
| CVE-2025-30247 | MC My Cloud Western Digital | 9.3 | Sep 29 | An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system… |
| CVE-2024-22170 | MC My Cloud Western Digital | 9.2 | Sep 27 | Unchecked buffer in Dynamic DNS client |
| CVE-2024-22169 | WD WD Discovery Western Digital | 7.1 | Aug 2 | Misconfiguration in node.js causing a code execution in WD Discovery |
| CVE-2024-22168 | MC My Cloud Home web app Western Digital | 5.9 | Jun 24 | Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps |
| CVE-2023-22819 | MC My Cloud Home & Duo Western Digital | 4.9 | Feb 5 | Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products |
| CVE-2023-22817 | MC My Cloud Home & Duo Western Digital | 5.5 | Feb 5 | Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products |
| CVE-2023-22814 | MC My Cloud OS 5 Western Digital | 9.8 | Jun 30 | Authentication Bypass issue in My Cloud OS 5 devices |
| CVE-2023-22815 | MC My Cloud OS 5 Western Digital | 6.7 | Jun 30 | Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices |
| CVE-2023-22816 | MC My Cloud OS 5 Western Digital | 8.8 | Jun 30 | Limited Post-Authentication Remote Command Injection in My Cloud Products |
| CVE-2022-36331 | MC My Cloud OS 5 Western Digital | 7.5 | Jun 12 | Impersonation attack causing an Authentication Bypass on Western Digital devices |
| CVE-2022-36328 | MC My Cloud Home and My Cloud Home Duo Western Digital | 4.9 | May 18 | Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices |
| CVE-2022-36327 | MC My Cloud OS 5 Western Digital | 9.8 | May 18 | Path traversal vulnerability leading to an arbitrary file write in Western Digital devices |
| CVE-2022-36326 | MC My Cloud Home and My Cloud Home Duo Western Digital | 4.9 | May 18 | Resource Exhaustion Vulnerability in Western Digital devices |
| CVE-2022-29840 | MC My Cloud OS 5 Western Digital | 5.5 | May 10 | Server Side Request Forgery Vulnerability in Western Digital My Cloud Devices |
| CVE-2022-29841 | MC My Cloud OS 5 Western Digital | 9.8 | May 10 | OS Command Injection vulnerability in Western Digital My Cloud devices |
| CVE-2022-29842 | MC My Cloud OS 5 Western Digital | 9.8 | May 10 | Command Injection Vulnerability in Western Digital My Cloud devices |
| CVE-2022-36329 | MC My Cloud Home and My Cloud Home Duo Western Digital | 7.5 | May 10 | Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices |
| CVE-2022-36330 | MC My Cloud Home and My Cloud Home Duo Western Digital | 8.1 | May 9 | Buffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices |
| CVE-2023-22813 | MC My Cloud Home Web App Western Digital | 4.3 | May 8 | Device API endpoint missing access controls on Western Digital Mobile and Web Apps |
| CVE-2022-29843 | MC My Cloud Western Digital | 9.8 | Jan 25 | Western Digital My Cloud OS 5 devices Command Injection Vulnerability |
| CVE-2022-29844 | MC My Cloud Western Digital | 9.8 | Jan 25 | Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp |
| CVE-2020-8990 | IB Ibi Western Digital | 9.1 | Feb 20 | Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation |
| CVE-2019-18931 | MC MY Cloud Ex2 Ultra Firmware Western Digital | 8.8 | Nov 13 | Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters |
| CVE-2019-18930 | MC MY Cloud Ex2 Ultra Firmware Western Digital | 8.8 | Nov 13 | Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a stack-based buffer overflow |
| CVE-2019-18929 | MC MY Cloud Ex2 Ultra Firmware Western Digital | 8.8 | Nov 13 | Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mgr.cgi stack-based buffer… |
| CVE-2019-9951 | MC MY Cloud Mirror Gen 2 Firmware Western Digital | 9.8 | Apr 24 | Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100… |
| CVE-2018-17153 | MC MY Cloud Wdbctl0020hwt Firmware Western Digital | 9.8 | Sep 18 | It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability |
| CVE-2016-10108 | MN Mycloud Nas Western Digital | 9.8 | Jan 3 | Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data |
| CVE-2016-10107 | MN Mycloud Nas Western Digital | 9.8 | Jan 3 | Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie header |