CVE-2022-36328
Published May 18, 2023Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to create arbitrary shares on arbitrary directories and e…
Vendor/product archive
westerndigital / my_cloud_os_5 CVEs
Beta · best-effort8 CVEs tagged to westerndigital / my_cloud_os_5 — 4 Critical, 0 High, 3 Medium, 1 Low, 0 Unrated.
CVE-2022-36327
Published May 18, 2023Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to write files to locations with certain critical filesys…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2022-36326
Published May 18, 2023An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the…
CVE-2023-22813
Published May 8, 2023A device API endpoint was missing access controls on Western Digital My Cloud OS 5 iOS and Anroid Mobile Apps, My Cloud Home iOS and Android Mobile Apps, SanDisk ibi iOS and Andro…
CVE-2020-29563
Published Dec 12, 2020An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to gain acces…
CVE-2020-28971
Published Dec 1, 2020An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to execute pr…
CVE-2020-28970
Published Dec 1, 2020An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to execute pr…
CVE-2020-28940
Published Dec 1, 2020On Western Digital My Cloud OS 5 devices before 5.06.115, the NAS Admin dashboard has an authentication bypass vulnerability that could allow an unauthenticated user to execute pr…
Showing 1-8 of 8 CVEsPage 1 of 1