Vulnerability index

Browse CVEs

69 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wd My Book Firmware CRITICAL 9.8
CVE-2019-16399EPSS 7%

Western Digital WD My Book World through II 1.02.12 suffers from Broken Authentication, which allows an attacker to access the /admin/ directory with…

Fix: after 1.02.12
Fix from $2,300 2019-09-18
My Book Live Firmware CRITICAL 9.8
CVE-2018-18472EPSS 30%

Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Command Execution bug via shell metacharacters in the /api/…

Mitigation only
Fix from $2,300 2019-06-19
My Cloud Firmware HIGH 8.8
CVE-2019-9949

Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a …

Fix: 2.31.183+
Fix from $1,950 2019-05-23
My Cloud Firmware CRITICAL 9.8
CVE-2019-9950

Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR21…

Fix: 2.31.174+
Fix from $2,300 2019-04-24
Tv Live Hub Firmware CRITICAL 9.8
CVE-2018-1151EPSS 8%

The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or…

No fix yet
Fix from $2,300 2018-06-12
My Cloud Firmware CRITICAL 9.8
CVE-2018-9148

Western Digital WD My Cloud v04.05.00-320 devices embed the session token (aka PHPSESSID) in filenames, which makes it easier for attackers to bypass…

No fix yet
Fix from $2,300 2018-03-30
My Cloud Pr4100 Firmware CRITICAL 9.8
CVE-2017-17560EPSS 73%

An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jquery/uploader/multi_uploadify.ph…

Patch available
Fix from $2,300 2017-12-12
Wd My Cloud MEDIUM 5.4
CVE-2014-5876

The WD My Cloud (aka com.wdc.wd2go) application 4.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle…

Mitigation only
Fix from $1,600 2014-09-11
Arkeia Virtual Appliance Firmware HIGH 7.5
CVE-2014-2846EPSS 9%

Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual appliance (AVA) with firmware before 10.2.9 allows remo…

Fix: after 10.2.7
Fix from $1,950 2014-04-28