Vulnerability index

Browse CVEs

8 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ibi CRITICAL 9.1
CVE-2020-8990

Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation.

Fix: 3.6.0+
Fix from $2,300 2020-02-20
My Cloud Ex2 Ultra Firmware HIGH 8.8
CVE-2019-18929

Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mg…

No fix yet
Fix from $1,950 2019-11-13
My Cloud Ex2 Ultra Firmware HIGH 8.8
CVE-2019-18930

Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a stack-based …

No fix yet
Fix from $1,950 2019-11-13
My Cloud Ex2 Ultra Firmware HIGH 8.8
CVE-2019-18931

Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST pa…

No fix yet
Fix from $1,950 2019-11-13
My Cloud Mirror Gen 2 Firmware CRITICAL 9.8
CVE-2019-9951

Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR21…

Fix: 2.31.174+
Fix from $2,300 2019-04-24
My Cloud Wdbctl0020hwt Firmware CRITICAL 9.8
CVE-2018-17153EPSS 87%

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated …

Fix: 2.30.196+
Fix from $2,300 2018-09-18
Mycloud Nas CRITICAL 9.8
CVE-2016-10107EPSS 11%

Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie header.

No fix yet
Fix from $2,300 2017-01-03
Mycloud Nas CRITICAL 9.8
CVE-2016-10108EPSS 97%

Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg …

No fix yet
Fix from $2,300 2017-01-03