Known vulnerabilities in WD Cloud

Vendor: Western Digital
Software: WD Cloud
Software CPE: cpe:2.3:h:western_digital:wd_cloud:*:*:*:*:*:*:*:*
Website: https://www.wdc.com/
Total vulnerabilities: 50
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WD Cloud WD Cloud is affected by 50 known vulnerabilities: 12 high, 25 medium, 13 low Critical High Medium Low

Vulnerabilities (50)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97741 - Memory corruption
CVE-2024-22170		 CWE-119 Medium
No
No
 - 27.09.2024 SB2024092704
#VU86124 - Resource exhaustion
CVE-2023-22819		 CWE-400 Medium
No
No
 5.27.161 06.02.2024 SB2024020608
#VU86123 - Server-Side Request Forgery (SSRF)
CVE-2023-22817		 CWE-918 High
No
No
 5.27.161 06.02.2024 SB2024020608
#VU77685 - Command injection
CVE-2023-22815		 CWE-77 Low
No
No
 - 26.06.2023 SB2023062605
#VU77683 - Command injection
CVE-2023-22816		 CWE-77 Medium
No
No
 - 26.06.2023 SB2023062605
#VU77147 - Improper Authentication
CVE-2022-36331		 CWE-287 Medium
No
No
 5.25.132 12.06.2023 SB2023061209
#VU71213 - Out-of-bounds write
CVE-2022-29844		 CWE-787 High
No
No
 5.26.119 17.01.2023 SB2023011719
#VU71212 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-29843		 CWE-94 High
No
No
 5.26.119 17.01.2023 SB2023011719
#VU71211 - Command injection
CVE-2022-29842		 CWE-77 High
No
No
 5.26.119 17.01.2023 SB2023011719
#VU71209 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-29841		 CWE-78 High
No
No
 5.26.119 17.01.2023 SB2023011719
#VU70656 - Server-Side Request Forgery (SSRF)
CVE-2022-29840		 CWE-918 High
No
No
 5.25.132 03.01.2023 SB2023010319
#VU69918 - Improper Authentication
CVE-2022-29838		 CWE-287 Medium
No
No
 - 06.12.2022 SB2022120608
#VU65833 - Out-of-bounds write
CVE-2021-33655		 CWE-787 Low
No
No
 - 27.07.2022 SB2022072725
SB2022072814
SB2022081739
and 77 more
#VU62643 - Resource Management Errors
CVE-2022-27775		 CWE-399 Low
No
No
 - 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 30 more
#VU62640 - Improper Authentication
CVE-2022-22576		 CWE-287 Medium
No
No
 - 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 60 more
#VU56615 - Insufficient Verification of Data Authenticity
CVE-2021-22947		 CWE-345 Medium
No
No
 - 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 43 more
#VU56613 - Cleartext Transmission of Sensitive Information
CVE-2021-22946		 CWE-319 Medium
No
No
 - 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 53 more
#VU56610 - Double Free
CVE-2021-22945		 CWE-415 Low
No
No
 - 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 20 more
#VU55146 - Improper Certificate Validation
CVE-2021-22924		 CWE-295 Medium
No
No
 - 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 33 more
#VU53587 - Use of Uninitialized Variable
CVE-2021-22898		 CWE-457 Medium
No
No
 - 26.05.2021 SB2021052620
SB2021052711
SB2021060128
and 47 more


Showing elements 1 - 20 out of 50