Known Vulnerabilities for products from Westerndigital

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Westerndigital".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Additional devices specifications by Westerndigital can be found at device.report : Westerndigital

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2022-23006 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 6.7 - MEDIUM 2022-09-27 2022-10-03
CVE-2022-23005 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 8.7 - HIGH 2023-01-23 2023-02-08
CVE-2022-23004 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 5.3 - MEDIUM 2022-07-29 2022-08-05
CVE-2022-23003 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 5.3 - MEDIUM 2022-07-29 2022-08-05
CVE-2022-23002 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 5.3 - MEDIUM 2022-07-29 2022-08-05
CVE-2022-23001 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 5.3 - MEDIUM 2022-07-29 2022-08-05
CVE-2022-23000 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 7.8 - HIGH 2022-07-25 2022-08-03
CVE-2022-22999 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 4.8 - MEDIUM 2022-07-25 2022-08-01
CVE-2022-22998 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 7.5 - HIGH 2022-07-12 2022-07-20
CVE-2022-22997 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 9.8 - CRITICAL 2022-07-12 2022-07-20
CVE-2022-22996 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 7.8 - HIGH 2022-03-30 2022-04-07
CVE-2022-22995 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 9.8 - CRITICAL 2022-03-25 2024-01-04
CVE-2022-22994 A remote code execution vulnerability was discovered on Western Digital My Cloud devices where an attacker could trick a NAS ... 9.8 - CRITICAL 2022-01-28 2022-03-15
CVE-2022-22993 A limited SSRF vulnerability was discovered on Western Digital My Cloud devices that could allow an attacker to impersonate a... 8.8 - HIGH 2022-01-28 2022-03-18
CVE-2022-22992 A command injection remote code execution vulnerability was discovered on Western Digital My Cloud Devices that could allow a... 9.8 - CRITICAL 2022-01-28 2023-07-11
CVE-2022-22991 A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loa... 8.8 - HIGH 2022-01-13 2022-01-21
CVE-2022-22990 A limited authentication bypass vulnerability was discovered that could allow an attacker to achieve remote code execution an... 8.8 - HIGH 2022-01-13 2023-07-11
CVE-2022-22989 My Cloud OS 5 was vulnerable to a pre-authenticated stack overflow vulnerability on the FTP service. Addressed the vulnerabil... 9.8 - CRITICAL 2022-01-13 2023-10-12
CVE-2022-22988 File and directory permissions have been corrected to prevent unintended users from modifying or accessing resources. 9.1 - CRITICAL 2022-01-13 2023-10-12
CVE-2021-36226 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 9.8 - CRITICAL 2023-02-06 2023-02-14

Known software with vulnerabilities from Westerndigital

Type Vendor Product Version
ApplicationWesterndigitalArkeia Virtual Appliance-
Operating
System
WesterndigitalArkeia Virtual Appliance Firmware10.2.7
ApplicationWesterndigitalDiagnostics1.7.0
ApplicationWesterndigitalDrive Manager2.93
ApplicationWesterndigitalFat32 Formatter1.0.9
HardwareWesterndigitalInand Cl Em132-
HardwareWesterndigitalInand Ix Em132-
HardwareWesterndigitalInand Ix Em132 Xi-
ApplicationWesterndigitalMy Cloud-
HardwareWesterndigitalMy Cloud Expert Series Ex2-
Operating
System
WesterndigitalMy Cloud Firmware-
HardwareWesterndigitalMy Cloud Mirror - Gen 2-
HardwareWesterndigitalMy Cloud Mirror Gen 2-
Operating
System
WesterndigitalMy Cloud Os 55.02.104
Operating
System
WesterndigitalMy Cloud Pr4100 Firmware2.30.172
Operating
System
WesterndigitalMy Net Firmware1.03.12
HardwareWesterndigitalMy Net N600-
HardwareWesterndigitalMy Net N750-
HardwareWesterndigitalMy Net N900-
HardwareWesterndigitalMy Net N900c-