Known vulnerabilities in My Cloud OS 5

Vendor: Western Digital
Software: My Cloud OS 5
Software CPE: cpe:2.3:o:western_digital:my_cloud_os_5:*:*:*:*:*:*:*:*
Website: https://www.wdc.com/
Total vulnerabilities: 52
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting My Cloud OS 5 My Cloud OS 5 is affected by 52 known vulnerabilities: 8 high, 27 medium, 17 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97741 - Memory corruption
CVE-2024-22170		 CWE-119 Medium
No
No
 5.29.102 27.09.2024 SB2024092704
#VU81874 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4154		 CWE-200 Medium
No
No
 5.30.103 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 17 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545		 CWE-122 High
Available
No
 5.30.103 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546		 CWE-73 Low
No
No
 5.30.103 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU81437 - Memory corruption
CVE-2023-4911		 CWE-119 Low
Available
Exploited
 5.30.103 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU77685 - Command injection
CVE-2023-22815		 CWE-77 Low
No
No
 5.26.300 26.06.2023 SB2023062605
#VU77683 - Command injection
CVE-2023-22816		 CWE-77 Medium
No
No
 5.26.300 26.06.2023 SB2023062605
#VU69918 - Improper Authentication
CVE-2022-29838		 CWE-287 Medium
No
No
 5.25.124 06.12.2022 SB2022120608
#VU65833 - Out-of-bounds write
CVE-2021-33655		 CWE-787 Low
No
No
 5.25.124 27.07.2022 SB2022072725
SB2022072814
SB2022081739
and 77 more
#VU64681 - Resource exhaustion
CVE-2022-32205		 CWE-400 Medium
No
No
 5.25.124 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 32 more
#VU63009 - Incorrect Implementation of Authentication Algorithm
CVE-2022-27782		 CWE-303 Medium
No
No
 5.25.124 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 68 more
#VU63008 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-27781		 CWE-835 Medium
No
No
 5.25.124 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 36 more
#VU62644 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27776		 CWE-200 Low
No
No
 5.25.124 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 62 more
#VU62643 - Resource Management Errors
CVE-2022-27775		 CWE-399 Low
No
No
 5.25.124 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 30 more
#VU62640 - Improper Authentication
CVE-2022-22576		 CWE-287 Medium
No
No
 5.25.124 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 60 more
#VU56615 - Insufficient Verification of Data Authenticity
CVE-2021-22947		 CWE-345 Medium
No
No
 5.25.124 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 43 more
#VU56613 - Cleartext Transmission of Sensitive Information
CVE-2021-22946		 CWE-319 Medium
No
No
 5.25.124 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 53 more
#VU56610 - Double Free
CVE-2021-22945		 CWE-415 Low
No
No
 5.25.124 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 20 more
#VU55146 - Improper Certificate Validation
CVE-2021-22924		 CWE-295 Medium
No
No
 5.25.124 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 33 more
#VU53587 - Use of Uninitialized Variable
CVE-2021-22898		 CWE-457 Medium
No
No
 5.25.124 26.05.2021 SB2021052620
SB2021052711
SB2021060128
and 47 more


Showing elements 1 - 20 out of 52