Known vulnerabilities in My Cloud DL2100

Vendor: Western Digital
Software: My Cloud DL2100
Software CPE: cpe:2.3:h:western_digital:my_cloud_dl2100:*:*:*:*:*:*:*:*
Website: https://www.wdc.com/
Total vulnerabilities: 56
Public exploits: 4
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting My Cloud DL2100 My Cloud DL2100 is affected by 56 known vulnerabilities: 14 high, 27 medium, 15 low Critical High Medium Low

Vulnerabilities (56)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97741 - Memory corruption
CVE-2024-22170		 CWE-119 Medium
No
No
 - 27.09.2024 SB2024092704
#VU86124 - Resource exhaustion
CVE-2023-22819		 CWE-400 Medium
No
No
 5.27.161 06.02.2024 SB2024020608
#VU86123 - Server-Side Request Forgery (SSRF)
CVE-2023-22817		 CWE-918 High
No
No
 5.27.161 06.02.2024 SB2024020608
#VU77685 - Command injection
CVE-2023-22815		 CWE-77 Low
No
No
 - 26.06.2023 SB2023062605
#VU77683 - Command injection
CVE-2023-22816		 CWE-77 Medium
No
No
 - 26.06.2023 SB2023062605
#VU71213 - Out-of-bounds write
CVE-2022-29844		 CWE-787 High
No
No
 5.26.119 17.01.2023 SB2023011719
#VU71212 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-29843		 CWE-94 High
No
No
 5.26.119 17.01.2023 SB2023011719
#VU71211 - Command injection
CVE-2022-29842		 CWE-77 High
No
No
 5.26.119 17.01.2023 SB2023011719
#VU71209 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-29841		 CWE-78 High
No
No
 5.26.119 17.01.2023 SB2023011719
#VU70656 - Server-Side Request Forgery (SSRF)
CVE-2022-29840		 CWE-918 High
No
No
 5.25.132 03.01.2023 SB2023010319
#VU69921 - Insufficiently Protected Credentials
CVE-2022-29839		 CWE-522 Medium
No
No
 - 06.12.2022 SB2022120608
#VU69342 - Out-of-bounds read
CVE-2021-0561		 CWE-125 Low
No
No
 - 15.11.2022 SB2022111548
SB2022112111
SB2022112145
and 7 more
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208		 CWE-347 Medium
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU64684 - Incorrect Default Permissions
CVE-2022-32207		 CWE-276 Low
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 35 more
#VU64682 - Resource exhaustion
CVE-2022-32206		 CWE-400 Medium
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 80 more
#VU64681 - Resource exhaustion
CVE-2022-32205		 CWE-400 Medium
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 32 more
#VU63009 - Incorrect Implementation of Authentication Algorithm
CVE-2022-27782		 CWE-303 Medium
No
No
 - 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 68 more
#VU63008 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-27781		 CWE-835 Medium
No
No
 - 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 36 more
#VU62644 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27776		 CWE-200 Low
No
No
 - 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 62 more
#VU62643 - Resource Management Errors
CVE-2022-27775		 CWE-399 Low
No
No
 - 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 30 more


Showing elements 1 - 20 out of 56