Known vulnerabilities in My Cloud PR4100

Vendor: Western Digital
Software: My Cloud PR4100
Software CPE: cpe:2.3:h:western_digital:my_cloud_pr4100:*:*:*:*:*:*:*:*
Website: https://www.wdc.com/
Total vulnerabilities: 65
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting My Cloud PR4100 My Cloud PR4100 is affected by 65 known vulnerabilities: 17 high, 29 medium, 19 low Critical High Medium Low

Vulnerabilities (65)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97741 - Memory corruption
CVE-2024-22170		 CWE-119 Medium
No
No
 - 27.09.2024 SB2024092704
#VU86124 - Resource exhaustion
CVE-2023-22819		 CWE-400 Medium
No
No
 5.27.161 06.02.2024 SB2024020608
#VU86123 - Server-Side Request Forgery (SSRF)
CVE-2023-22817		 CWE-918 High
No
No
 5.27.161 06.02.2024 SB2024020608
#VU81874 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4154		 CWE-200 Medium
No
No
 - 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 17 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545		 CWE-122 High
Available
No
 - 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546		 CWE-73 Low
No
No
 - 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU81437 - Memory corruption
CVE-2023-4911		 CWE-119 Low
Available
Exploited
 - 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU77685 - Command injection
CVE-2023-22815		 CWE-77 Low
No
No
 - 26.06.2023 SB2023062605
#VU77683 - Command injection
CVE-2023-22816		 CWE-77 Medium
No
No
 - 26.06.2023 SB2023062605
#VU77147 - Improper Authentication
CVE-2022-36331		 CWE-287 Medium
No
No
 5.25.132 12.06.2023 SB2023061209
#VU71213 - Out-of-bounds write
CVE-2022-29844		 CWE-787 High
No
No
 5.26.119 17.01.2023 SB2023011719
#VU71212 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-29843		 CWE-94 High
No
No
 5.26.119 17.01.2023 SB2023011719
#VU71211 - Command injection
CVE-2022-29842		 CWE-77 High
No
No
 5.26.119 17.01.2023 SB2023011719
#VU71209 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-29841		 CWE-78 High
No
No
 5.26.119 17.01.2023 SB2023011719
#VU70656 - Server-Side Request Forgery (SSRF)
CVE-2022-29840		 CWE-918 High
No
No
 5.25.132 03.01.2023 SB2023010319
#VU69921 - Insufficiently Protected Credentials
CVE-2022-29839		 CWE-522 Medium
No
No
 - 06.12.2022 SB2022120608
#VU69918 - Improper Authentication
CVE-2022-29838		 CWE-287 Medium
No
No
 - 06.12.2022 SB2022120608
#VU69342 - Out-of-bounds read
CVE-2021-0561		 CWE-125 Low
No
No
 - 15.11.2022 SB2022111548
SB2022112111
SB2022112145
and 7 more
#VU64684 - Incorrect Default Permissions
CVE-2022-32207		 CWE-276 Low
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 35 more
#VU62644 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27776		 CWE-200 Low
No
No
 - 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 62 more


Showing elements 1 - 20 out of 65