Known vulnerabilities in My Cloud - page 2

Vendor: Western Digital
Software: My Cloud
Software CPE: cpe:2.3:h:western_digital:my_cloud:*:*:*:*:*:*:*:*
Website: https://www.wdc.com/
Total vulnerabilities: 54
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting My Cloud My Cloud is affected by 54 known vulnerabilities: 12 high, 27 medium, 15 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69921 - Insufficiently Protected Credentials
CVE-2022-29839		 CWE-522 Medium
No
No
 - 06.12.2022 SB2022120608
#VU69342 - Out-of-bounds read
CVE-2021-0561		 CWE-125 Low
No
No
 - 15.11.2022 SB2022111548
SB2022112111
SB2022112145
and 7 more
#VU65779 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-22999		 CWE-79 Low
No
No
 - 26.07.2022 SB2022072612
#VU65777 - Out-of-bounds write
CVE-2022-29208		 CWE-787 Low
No
No
 - 26.07.2022 SB2022072610
SB2022072612
#VU65775 - Improper input validation
CVE-2022-29213		 CWE-20 Low
No
No
 - 26.07.2022 SB2022072610
SB2022072612
#VU65774 - Improper input validation
CVE-2022-29191		 CWE-20 Low
No
No
 - 26.07.2022 SB2022072610
SB2022072612
#VU65773 - Selection of Less-Secure Algorithm During Negotiat
CVE-2022-23000		 CWE-757 Low
No
No
 - 26.07.2022 SB2022072612
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208		 CWE-347 Medium
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU64684 - Incorrect Default Permissions
CVE-2022-32207		 CWE-276 Low
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 35 more
#VU64682 - Resource exhaustion
CVE-2022-32206		 CWE-400 Medium
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 80 more
#VU64681 - Resource exhaustion
CVE-2022-32205		 CWE-400 Medium
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 32 more
#VU63553 - Integer overflow
CVE-2021-43618		 CWE-190 Medium
No
No
 - 24.05.2022 SB2021121654
SB2022052401
SB2021120223
and 85 more
#VU63332 - Reachable Assertion
CVE-2022-0865		 CWE-617 Medium
No
No
 - 17.05.2022 SB2022051726
SB2022051729
SB2022072612
and 25 more
#VU63328 - NULL Pointer Dereference
CVE-2022-0562		 CWE-476 Medium
No
No
 - 17.05.2022 SB2022051726
SB2022051729
SB2022072612
and 24 more
#VU63326 - NULL Pointer Dereference
CVE-2022-0561		 CWE-476 Medium
No
No
 - 17.05.2022 SB2022051726
SB2022051729
SB2022072612
and 27 more
#VU62644 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27776		 CWE-200 Low
No
No
 - 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 62 more
#VU61623 - Unrestricted Upload of File with Dangerous Type
CVE-2022-22995		 CWE-434 High
No
No
 - 25.03.2022 SB2022032507
SB2023100551
SB2023100552
and 10 more
#VU61619 - Stack-based buffer overflow
CVE-2022-23125		 CWE-121 High
No
No
 - 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 6 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 - 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU61245 - Permissions, Privileges, and Access Controls
CVE-2022-0492		 CWE-264 Low
Available
Exploited
 - 10.03.2022 SB2022031028
SB2022031032
SB2022031033
and 63 more


Showing elements 21 - 40 out of 54