Known vulnerabilities in My Cloud (P/N: WDBCTLxxxxxx-10)
Vendor:
Western Digital
Software:
My Cloud (P/N: WDBCTLxxxxxx-10)
Software CPE:
cpe:2.3:h:western_digital:my_cloud_p_n_wdbctlxxxxxx-10:*:*:*:*:*:*:*:*
Website:
https://www.wdc.com/
Total vulnerabilities:
5
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU81874 - Exposure of sensitive information to an unauthorized actor CVE-2023-4154 |
CWE-200 | Medium | - | 11.10.2023 |
SB2023101133 SB2023101134 SB2023101137 and 17 more |
||
| #VU81865 - Heap-based Buffer Overflow CVE-2023-38545 |
CWE-122 | High | - | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 99 more |
||
| #VU81863 - External Control of File Name or Path CVE-2023-38546 |
CWE-73 | Low | - | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 125 more |
||
| #VU81437 - Memory corruption CVE-2023-4911 |
CWE-119 | Low | - | 03.10.2023 |
SB2023100343 SB2023100345 SB2023100402 and 94 more |
||
| #VU51481 - Improper Link Resolution Before File Access ('Link Following') CVE-2021-3310 |
CWE-59 | High | 5.10.122 | 15.03.2021 |
SB2021031511 |