Known vulnerabilities in My Cloud OS 5 - page 2

Vendor: Western Digital
Software: My Cloud OS 5
Software CPE: cpe:2.3:o:western_digital:my_cloud_os_5:*:*:*:*:*:*:*:*
Website: https://www.wdc.com/
Total vulnerabilities: 52
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting My Cloud OS 5 My Cloud OS 5 is affected by 52 known vulnerabilities: 8 high, 27 medium, 17 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69921 - Insufficiently Protected Credentials
CVE-2022-29839		 CWE-522 Medium
No
No
 5.25.124 06.12.2022 SB2022120608
#VU69342 - Out-of-bounds read
CVE-2021-0561		 CWE-125 Low
No
No
 5.25.124 15.11.2022 SB2022111548
SB2022112111
SB2022112145
and 7 more
#VU65779 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-22999		 CWE-79 Low
No
No
 5.23.114 26.07.2022 SB2022072612
#VU65777 - Out-of-bounds write
CVE-2022-29208		 CWE-787 Low
No
No
 5.23.114 26.07.2022 SB2022072610
SB2022072612
#VU65775 - Improper input validation
CVE-2022-29213		 CWE-20 Low
No
No
 5.23.114 26.07.2022 SB2022072610
SB2022072612
#VU65774 - Improper input validation
CVE-2022-29191		 CWE-20 Low
No
No
 5.23.114 26.07.2022 SB2022072610
SB2022072612
#VU65773 - Selection of Less-Secure Algorithm During Negotiat
CVE-2022-23000		 CWE-757 Low
No
No
 5.23.114 26.07.2022 SB2022072612
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208		 CWE-347 Medium
No
No
 5.25.124 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU64684 - Incorrect Default Permissions
CVE-2022-32207		 CWE-276 Low
No
No
 5.25.124 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 35 more
#VU64682 - Resource exhaustion
CVE-2022-32206		 CWE-400 Medium
No
No
 5.25.124 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 80 more
#VU63553 - Integer overflow
CVE-2021-43618		 CWE-190 Medium
No
No
 5.22.113 24.05.2022 SB2021121654
SB2022052401
SB2021120223
and 85 more
#VU63332 - Reachable Assertion
CVE-2022-0865		 CWE-617 Medium
No
No
 5.23.114 17.05.2022 SB2022051726
SB2022051729
SB2022072612
and 25 more
#VU63328 - NULL Pointer Dereference
CVE-2022-0562		 CWE-476 Medium
No
No
 5.23.114 17.05.2022 SB2022051726
SB2022051729
SB2022072612
and 24 more
#VU63326 - NULL Pointer Dereference
CVE-2022-0561		 CWE-476 Medium
No
No
 5.23.114 17.05.2022 SB2022051726
SB2022051729
SB2022072612
and 27 more
#VU61623 - Unrestricted Upload of File with Dangerous Type
CVE-2022-22995		 CWE-434 High
No
No
 5.19.117, 7.16-220 25.03.2022 SB2022032507
SB2023100551
SB2023100552
and 10 more
#VU61622 - Out-of-bounds read
CVE-2022-23124		 CWE-125 Medium
No
No
 5.19.117, 7.16-220 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 5 more
#VU61619 - Stack-based buffer overflow
CVE-2022-23125		 CWE-121 High
No
No
 5.19.117, 7.16-220 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 6 more
#VU61617 - Stack-based buffer overflow
CVE-2022-0194		 CWE-121 High
No
No
 5.19.117, 7.16-220 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 5 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 5.22.113, 5.23.114 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU61245 - Permissions, Privileges, and Access Controls
CVE-2022-0492		 CWE-264 Low
Available
Exploited
 5.22.113 10.03.2022 SB2022031028
SB2022031032
SB2022031033
and 63 more


Showing elements 21 - 40 out of 52