Known Vulnerabilities for My Cloud Home Firmware by Westerndigital
Listed below are 10 of the newest known vulnerabilities associated with "My Cloud Home Firmware" by "Westerndigital".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-36331 json | Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attac... | 7.5 - HIGH | 2023-06-12 | 2023-06-21 |
| CVE-2022-36330 json | A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote co... | 8.1 - HIGH | 2023-05-10 | 2023-05-22 |
| CVE-2022-36329 json | An improper privilege management issue that could allow an attacker to cause a denial of service over the OTA mechanism was d... | 7.5 - HIGH | 2023-05-10 | 2023-05-18 |
| CVE-2022-36328 json | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to ... | 4.9 - MEDIUM | 2023-05-18 | 2023-05-27 |
| CVE-2022-36327 json | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to ... | 9.8 - CRITICAL | 2023-05-18 | 2023-05-31 |
| CVE-2022-36326 json | An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume... | 4.9 - MEDIUM | 2023-05-18 | 2023-05-26 |
| CVE-2022-29837 json | A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which could ... | 7.8 - HIGH | 2022-12-01 | 2022-12-06 |
| CVE-2022-29836 json | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability was discovered via an HTTP API o... | 4.3 - MEDIUM | 2022-11-09 | 2022-11-15 |
| CVE-2022-23006 json | A stack-based buffer overflow vulnerability was found on Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi th... | 6.7 - MEDIUM | 2022-09-27 | 2022-10-03 |
| CVE-2022-22998 json | Implemented protections on AWS credentials that were not properly protected. | 7.5 - HIGH | 2022-07-12 | 2022-07-20 |