Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

westerndigital my cloud dl2100 firmware vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3

CVE-2022-29843

A command injection vulnerability in the DDNS service configuration of Western Digital My Cloud OS 5 devices running firmware versions before 5.26.119 allows an malicious user to execute code in the context of the root user.
Westerndigital My Cloud Pr2100 FirmwareWesterndigital My Cloud Pr4100 FirmwareWesterndigital My Cloud Ex4100 FirmwareWesterndigital My Cloud Ex2 Ultra FirmwareWesterndigital My Cloud Mirror G2 FirmwareWesterndigital My Cloud Dl2100 FirmwareWesterndigital My Cloud Dl4100 FirmwareWesterndigital My Cloud Ex2100 Firmware
4.8
CVSSv3

CVE-2022-22999

Western Digital My Cloud devices are vulnerable to a cross side scripting vulnerability that can allow a malicious user with elevated privileges access to drives being backed up to construct and inject JavaScript payloads into an authenticated user's browser. As a result, it...
Westerndigital My Cloud Pr2100 FirmwareWesterndigital My Cloud Pr4100 FirmwareWesterndigital My Cloud Ex4100 FirmwareWesterndigital My Cloud Ex2 Ultra FirmwareWesterndigital My Cloud Mirror G2 FirmwareWesterndigital My Cloud Dl2100 FirmwareWesterndigital My Cloud Dl4100 FirmwareWesterndigital My Cloud Ex2100 Firmware
9.8
CVSSv3

CVE-2022-29844

A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions before 5.26.119 allows an malicious user to read and write arbitrary files. This could lead to a full NAS compromise and would give remote execution capabilities to the attacker.
Westerndigital My Cloud Pr2100 FirmwareWesterndigital My Cloud Pr4100 FirmwareWesterndigital My Cloud Ex4100 FirmwareWesterndigital My Cloud Ex2 Ultra FirmwareWesterndigital My Cloud Mirror G2 FirmwareWesterndigital My Cloud Dl2100 FirmwareWesterndigital My Cloud Dl4100 FirmwareWesterndigital My Cloud Ex2100 Firmware
8.8
CVSSv3

CVE-2019-9949

Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution (as root, starting from a low-privilege user session) vulnerability. The cgi-bin/webfile_mgr.cgi file allows arbitra...
Westerndigital My Cloud FirmwareWesterndigital My Cloud Mirror Gen2 FirmwareWesterndigital My Cloud Ex2 Ultra FirmwareWesterndigital My Cloud Ex2100 FirmwareWesterndigital My Cloud Ex4100 FirmwareWesterndigital My Cloud Dl2100 FirmwareWesterndigital My Cloud Dl4100 FirmwareWesterndigital My Cloud Pr2100 FirmwareWesterndigital My Cloud Pr4100 Firmware
9.8
CVSSv3

CVE-2019-9950

Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware prior to 2.31.174 is affected by an authentication bypass vulnerability. The login_mgr.cgi file che...
Westerndigital My Cloud FirmwareWesterndigital My Cloud Mirror Gen2 FirmwareWesterndigital My Cloud Ex2 Ultra FirmwareWesterndigital My Cloud Ex2100 FirmwareWesterndigital My Cloud Ex4100 FirmwareWesterndigital My Cloud Dl2100 FirmwareWesterndigital My Cloud Dl4100 FirmwareWesterndigital My Cloud Pr2100 FirmwareWesterndigital My Cloud Pr4100 Firmware
7.8
CVSSv3

CVE-2022-23000

The Western Digital My Cloud Web App [https://os5.mycloud.com/] uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead of "TLS" ...
Westerndigital My Cloud Pr2100 FirmwareWesterndigital My Cloud Pr4100 FirmwareWesterndigital My Cloud Ex4100 FirmwareWesterndigital My Cloud Ex2 Ultra FirmwareWesterndigital My Cloud Mirror G2 FirmwareWesterndigital My Cloud Dl2100 FirmwareWesterndigital My Cloud Dl4100 FirmwareWesterndigital My Cloud Ex2100 FirmwareWesterndigital My Cloud Firmware
7.5
CVSSv3

CVE-2022-36331

Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attack that could allow an unauthenticated malicious user to gain access to user data. This issue affects My Cloud OS 5 devices: prior to 5.25.132; My Cloud Hom...
Westerndigital My Cloud Pr2100 FirmwareWesterndigital My Cloud Pr4100 FirmwareWesterndigital My Cloud Ex4100 FirmwareWesterndigital My Cloud Ex2 Ultra FirmwareWesterndigital My Cloud Mirror G2 FirmwareWesterndigital My Cloud Dl2100 FirmwareWesterndigital My Cloud Dl4100 FirmwareWesterndigital My Cloud Ex2100 FirmwareWesterndigital My Cloud Home FirmwareWesterndigital My Cloud Home Duo FirmwareWesterndigital Sandisk Ibi FirmwareWesterndigital My Cloud Firmware
4.9
CVSSv3

CVE-2023-22819

An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being stopped and restarted exists in Western Digital My Cloud Home, My Cloud Home Duo, SanD...
Westerndigital My Cloud Pr4100 FirmwareWesterndigital My Cloud Ex4100 FirmwareWesterndigital My Cloud Ex2 Ultra FirmwareWesterndigital My Cloud Mirror G2 FirmwareWesterndigital My Cloud Dl2100 FirmwareWesterndigital My Cloud Dl4100 FirmwareWesterndigital My Cloud Ex2100 FirmwareWesterndigital My Cloud Glacier FirmwareWesterndigital Wd Cloud FirmwareWesterndigital My Cloud Home FirmwareWesterndigital My Cloud Home Duo FirmwareWesterndigital Sandisk Ibi Firmware
5.5
CVSSv3

CVE-2023-22817

Server-side request forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL using another DNS address to point back to the loopback adapter. This could then allow the URL to exploit other vulnerabilities on the local server. This was ad...
Westerndigital My Cloud Pr2100 FirmwareWesterndigital My Cloud Pr4100 FirmwareWesterndigital My Cloud Ex4100 FirmwareWesterndigital My Cloud Ex2 Ultra FirmwareWesterndigital My Cloud Mirror G2 FirmwareWesterndigital My Cloud Dl2100 FirmwareWesterndigital My Cloud Dl4100 FirmwareWesterndigital My Cloud Ex2100 FirmwareWesterndigital My Cloud Glacier FirmwareWesterndigital Wd Cloud FirmwareWesterndigital My Cloud Home FirmwareWesterndigital My Cloud Home Duo FirmwareWesterndigital Sandisk Ibi Firmware
9.8
CVSSv3

CVE-2022-22995

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
Westerndigital My Cloud Pr2100 FirmwareWesterndigital My Cloud Pr4100 FirmwareWesterndigital My Cloud Ex4100 FirmwareWesterndigital My Cloud Ex2 Ultra FirmwareWesterndigital My Cloud Mirror Gen 2 FirmwareWesterndigital My Cloud Dl2100 FirmwareWesterndigital My Cloud Dl4100 FirmwareWesterndigital My Cloud Ex2100 FirmwareWesterndigital My Cloud FirmwareWesterndigital Wd Cloud FirmwareWesterndigital My Cloud Home FirmwareFedoraproject Fedora 37Fedoraproject Fedora 38Fedoraproject Fedora 39Netatalk Netatalk
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5834CVE-2024-30100CVE-2024-4577physicaldosCVE-2024-30099CVE-2024-27801CVE-2024-32146logic flaw
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook