westerndigital my cloud firmware vulnerabilities and exploits

(subscribe to this query)

A buffer overflow vulnerability exists on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices. An attacker would require exploitation of another vulnerability to raise ...

Westerndigital My Cloud Home Duo Firmware Westerndigital Sandisk Ibi Firmware Westerndigital My Cloud Home Firmware

Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API commands for firmware uploads and installation.

Westerndigital My Cloud Os

Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files.

Westerndigital My Cloud Os

A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions before 5.26.119 allows an malicious user to read and write arbitrary files. This could lead to a full NAS compromise and would give remote execution capabilities to the attacker.

Westerndigital My Cloud Pr2100 Firmware Westerndigital My Cloud Pr4100 Firmware Westerndigital My Cloud Ex4100 Firmware Westerndigital My Cloud Ex2 Ultra Firmware Westerndigital My Cloud Mirror G2 Firmware Westerndigital My Cloud Dl2100 Firmware Westerndigital My Cloud Dl4100 Firmware Westerndigital My Cloud Ex2100 Firmware

A command injection vulnerability in the DDNS service configuration of Western Digital My Cloud OS 5 devices running firmware versions before 5.26.119 allows an malicious user to execute code in the context of the root user.

Westerndigital My Cloud Pr2100 Firmware Westerndigital My Cloud Pr4100 Firmware Westerndigital My Cloud Ex4100 Firmware Westerndigital My Cloud Ex2 Ultra Firmware Westerndigital My Cloud Mirror G2 Firmware Westerndigital My Cloud Dl2100 Firmware Westerndigital My Cloud Dl4100 Firmware Westerndigital My Cloud Ex2100 Firmware

Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution (as root, starting from a low-privilege user session) vulnerability. The cgi-bin/webfile_mgr.cgi file allows arbitra...

Westerndigital My Cloud Firmware Westerndigital My Cloud Mirror Gen2 Firmware Westerndigital My Cloud Ex2 Ultra Firmware Westerndigital My Cloud Ex2100 Firmware Westerndigital My Cloud Ex4100 Firmware Westerndigital My Cloud Dl2100 Firmware Westerndigital My Cloud Dl4100 Firmware Westerndigital My Cloud Pr2100 Firmware Westerndigital My Cloud Pr4100 Firmware

1 Github repository

Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware prior to 2.31.174 is affected by an authentication bypass vulnerability. The login_mgr.cgi file che...

Westerndigital My Cloud Firmware Westerndigital My Cloud Mirror Gen2 Firmware Westerndigital My Cloud Ex2 Ultra Firmware Westerndigital My Cloud Ex2100 Firmware Westerndigital My Cloud Ex4100 Firmware Westerndigital My Cloud Dl2100 Firmware Westerndigital My Cloud Dl4100 Firmware Westerndigital My Cloud Pr2100 Firmware Westerndigital My Cloud Pr4100 Firmware

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook