Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

western digital my cloud pr4100 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-22817
Server-side request forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL using another DNS address to point back to the loopback adapter. This could then allow the URL to exploit other vulnerabilities on the local server. This was ad...
Westerndigital My Cloud Pr2100 FirmwareWesterndigital My Cloud Pr4100 FirmwareWesterndigital My Cloud Ex4100 FirmwareWesterndigital My Cloud Ex2 Ultra FirmwareWesterndigital My Cloud Mirror G2 FirmwareWesterndigital My Cloud Dl2100 FirmwareWesterndigital My Cloud Dl4100 FirmwareWesterndigital My Cloud Ex2100 FirmwareWesterndigital My Cloud Glacier FirmwareWesterndigital Wd Cloud FirmwareWesterndigital My Cloud Home FirmwareWesterndigital My Cloud Home Duo FirmwareWesterndigital Sandisk Ibi Firmware
NA
CVE-2023-22819
An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being stopped and restarted exists in Western Digital My Cloud Home, My Cloud Home Duo, SanD...
Westerndigital My Cloud Pr4100 FirmwareWesterndigital My Cloud Ex4100 FirmwareWesterndigital My Cloud Ex2 Ultra FirmwareWesterndigital My Cloud Mirror G2 FirmwareWesterndigital My Cloud Dl2100 FirmwareWesterndigital My Cloud Dl4100 FirmwareWesterndigital My Cloud Ex2100 FirmwareWesterndigital My Cloud Glacier FirmwareWesterndigital Wd Cloud FirmwareWesterndigital My Cloud Home FirmwareWesterndigital My Cloud Home Duo FirmwareWesterndigital Sandisk Ibi Firmware
NA
CVE-2022-36331
Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attack that could allow an unauthenticated malicious user to gain access to user data. This issue affects My Cloud OS 5 devices: prior to 5.25.132; My Cloud Hom...
Westerndigital My Cloud Pr2100 FirmwareWesterndigital My Cloud Pr4100 FirmwareWesterndigital My Cloud Ex4100 FirmwareWesterndigital My Cloud Ex2 Ultra FirmwareWesterndigital My Cloud Mirror G2 FirmwareWesterndigital My Cloud Dl2100 FirmwareWesterndigital My Cloud Dl4100 FirmwareWesterndigital My Cloud Ex2100 FirmwareWesterndigital My Cloud Home FirmwareWesterndigital My Cloud Home Duo FirmwareWesterndigital Sandisk Ibi FirmwareWesterndigital My Cloud Firmware
NA
CVE-2022-36326
An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being stopped and restarted exists in Western Digital My Cloud Home, My Cloud Home Duo, SanD...
Westerndigital My Cloud Os 5Westerndigital My Cloud Home FirmwareWesterndigital Sandisk Ibi FirmwareWesterndigital My Cloud Home Duo Firmware
NA
CVE-2022-36328
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an malicious user to create arbitrary shares on arbitrary directories and exfiltrate sensitive files, passwords, users and device configurations exists in Weste...
Westerndigital My Cloud Os 5Westerndigital My Cloud Home FirmwareWesterndigital Sandisk Ibi FirmwareWesterndigital My Cloud Home Duo Firmware
NA
CVE-2022-29840
Server-Side Request Forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL to point back to the loopback adapter was addressed in Western Digital My Cloud OS 5 devices. This could allow the URL to exploit other vulnerabilities on the l...
Westerndigital My Cloud Os
NA
CVE-2022-29841
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that was caused by a command that read files from a privileged location and created a system command without sanitizing the read data. This command could be triggere...
Westerndigital My Cloud Os
NA
CVE-2022-29842
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability that could allow an malicious user to execute code in the context of the root user on a vulnerable CGI file exists in Western Digital My Cloud OS 5 devicesThis issue affect...
Westerndigital My Cloud Os
NA
CVE-2022-29843
A command injection vulnerability in the DDNS service configuration of Western Digital My Cloud OS 5 devices running firmware versions before 5.26.119 allows an malicious user to execute code in the context of the root user.
Westerndigital My Cloud Pr2100 FirmwareWesterndigital My Cloud Pr4100 FirmwareWesterndigital My Cloud Ex4100 FirmwareWesterndigital My Cloud Ex2 Ultra FirmwareWesterndigital My Cloud Mirror G2 FirmwareWesterndigital My Cloud Dl2100 FirmwareWesterndigital My Cloud Dl4100 FirmwareWesterndigital My Cloud Ex2100 Firmware
NA
CVE-2022-29844
A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions before 5.26.119 allows an malicious user to read and write arbitrary files. This could lead to a full NAS compromise and would give remote execution capabilities to the attacker.
Westerndigital My Cloud Pr2100 FirmwareWesterndigital My Cloud Pr4100 FirmwareWesterndigital My Cloud Ex4100 FirmwareWesterndigital My Cloud Ex2 Ultra FirmwareWesterndigital My Cloud Mirror G2 FirmwareWesterndigital My Cloud Dl2100 FirmwareWesterndigital My Cloud Dl4100 FirmwareWesterndigital My Cloud Ex2100 Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook