Known vulnerabilities in My Cloud Mirror Gen 2

Vendor: Western Digital
Software: My Cloud Mirror Gen 2
Software CPE: cpe:2.3:h:western_digital:my_cloud_mirror_gen_2:*:*:*:*:*:*:*:*
Website: https://www.wdc.com/
Total vulnerabilities: 24
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting My Cloud Mirror Gen 2 My Cloud Mirror Gen 2 is affected by 24 known vulnerabilities: 10 high, 8 medium, 6 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81874 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4154		 CWE-200 Medium
No
No
 - 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 17 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545		 CWE-122 High
Available
No
 - 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546		 CWE-73 Low
No
No
 - 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU81437 - Memory corruption
CVE-2023-4911		 CWE-119 Low
Available
Exploited
 - 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU61623 - Unrestricted Upload of File with Dangerous Type
CVE-2022-22995		 CWE-434 High
No
No
 - 25.03.2022 SB2022032507
SB2023100551
SB2023100552
and 10 more
#VU61622 - Out-of-bounds read
CVE-2022-23124		 CWE-125 Medium
No
No
 - 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 5 more
#VU61621 - Out-of-bounds read
CVE-2022-23123		 CWE-125 Medium
No
No
 - 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 6 more
#VU61620 - Improper Handling of Exceptional Conditions
CVE-2022-23121		 CWE-755 High
No
No
 - 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 7 more
#VU61619 - Stack-based buffer overflow
CVE-2022-23125		 CWE-121 High
No
No
 - 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 6 more
#VU61618 - Stack-based buffer overflow
CVE-2022-23122		 CWE-121 High
No
No
 - 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 5 more
#VU61617 - Stack-based buffer overflow
CVE-2022-0194		 CWE-121 High
No
No
 - 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 5 more
#VU60714 - Insufficient Verification of Data Authenticity
CVE-2022-22994		 CWE-345 Medium
No
No
 - 18.02.2022 SB2022021810
#VU60713 - Command injection
CVE-2022-22991		 CWE-77 Medium
No
No
 - 18.02.2022 SB2022021810
#VU60712 - Stack-based buffer overflow
CVE-2022-22989		 CWE-121 Medium
No
No
 - 18.02.2022 SB2022021810
#VU60711 - Command injection
CVE-2022-22992		 CWE-77 High
No
No
 - 18.02.2022 SB2022021810
#VU60710 - Improper Authentication
CVE-2022-22990		 CWE-287 Low
No
No
 - 18.02.2022 SB2022021810
#VU60709 - Server-Side Request Forgery (SSRF)
CVE-2022-22993		 CWE-918 Low
No
No
 - 18.02.2022 SB2022021810
#VU60186 - Out-of-bounds write
CVE-2021-44142		 CWE-787 High
Available
No
 - 31.01.2022 SB2022013111
SB2022013118
SB2022013119
and 36 more
#VU58432 - Use After Free
CVE-2020-21913		 CWE-416 Medium
No
No
 - 29.11.2021 SB2021112917
SB2021112918
SB2022021808
and 10 more
#VU58097 - Permissions, Privileges, and Access Controls
CVE-2020-25717		 CWE-264 Medium
No
No
 - 10.11.2021 SB2021111008
SB2021111201
SB2021112913
and 43 more


Showing elements 1 - 20 out of 24