Browse CVEs

CRITICAL 9.1 CVE-2020-8990 Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation. Ibi 3.6.0+ Fix from $2,3002020-02-20 HIGH 8.8 CVE-2019-18929 Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mg… My Cloud Ex2 Ultra Firmware No fix yet Fix from $1,9502019-11-13 HIGH 8.8 CVE-2019-18930 Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a stack-based … My Cloud Ex2 Ultra Firmware No fix yet Fix from $1,9502019-11-13 HIGH 8.8 CVE-2019-18931 Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST pa… My Cloud Ex2 Ultra Firmware No fix yet Fix from $1,9502019-11-13 CRITICAL 9.8 CVE-2019-9951 Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR21… My Cloud Mirror Gen 2 Firmware 2.31.174+ Fix from $2,3002019-04-24 CRITICAL 9.8 CVE-2018-17153EPSS 87% It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated … My Cloud Wdbctl0020hwt Firmware 2.30.196+ Fix from $2,3002018-09-18 CRITICAL 9.8 CVE-2016-10107EPSS 11% Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie header. Mycloud Nas No fix yet Fix from $2,3002017-01-03 CRITICAL 9.8 CVE-2016-10108EPSS 97% Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg … Mycloud Nas No fix yet Fix from $2,3002017-01-03