Western Digital vulnerabilities
45 CVEs and advisories name Western Digital as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-30248DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary
- CVE-2025-30247An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remot
- CVE-2025-57699Western Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows service with an unquoted file path.
- CVE-2024-22170Unchecked buffer in Dynamic DNS client
- CVE-2024-22169Misconfiguration in node.js causing a code execution in WD Discovery
- CVE-2024-22168Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps
- CVE-2023-22819Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
- CVE-2023-22817Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
- CVE-2023-22814Authentication Bypass issue in My Cloud OS 5 devices
- CVE-2023-22815Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices
- CVE-2023-22816Limited Post-Authentication Remote Command Injection in My Cloud Products
- CVE-2022-36331Impersonation attack causing an Authentication Bypass on Western Digital devices
- CVE-2022-36328Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices
- CVE-2022-36327Path traversal vulnerability leading to an arbitrary file write in Western Digital devices
- CVE-2022-36326Resource Exhaustion Vulnerability in Western Digital devices
- CVE-2022-29840Server Side Request Forgery Vulnerability in Western Digital My Cloud Devices
- CVE-2022-29841OS Command Injection vulnerability in Western Digital My Cloud devices
- CVE-2022-29842Command Injection Vulnerability in Western Digital My Cloud devices
- CVE-2022-36329Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices
- CVE-2022-36330Buffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices
- CVE-2023-22813Device API endpoint missing access controls on Western Digital Mobile and Web Apps
- CVE-2022-29844Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp
- CVE-2022-29843Western Digital My Cloud OS 5 devices Command Injection Vulnerability
- CVE-2022-29839Remote Backups Application Discloses Stored Credentials
- CVE-2022-29838Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices
- CVE-2022-29837Path traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices
- CVE-2022-29836Post-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP API
- CVE-2022-23006Buffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi
- CVE-2022-29835WD Discovery's Use of Weak Hashing Algorithm for Code Signing
- CVE-2022-23004Algorithm incorrectly returning error and Invalid unreduced value written to output buffer