Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 21

Export CSV
CVE-2022-22990

Limited authentication bypass vulnerability on Western Digital My Cloud devices

A limited authentication bypass vulnerability was discovered that could allow an attacker to achieve remote code execution and escalate privileges on the My Cloud devices. Addressed this vulnerability by changing access token validation logic and rewriting rule logic on PHP scripts.

CVSS 3.1 · 7.8 High EPSS 2.2% KEV · Not listed
Vendors
Westerndigital
Products
My Cloud My Cloud Dl2100 My Cloud Dl4100 and 8 more