Western Digital vulnerabilities
45 CVEs and advisories name Western Digital as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-23003Shared secret or Point multiplication of NIST P-256 points with X coordinate of zero
- CVE-2022-23002Point Compression/Decompression of NIST P-256 points with X coordinate of zero
- CVE-2022-23001Sweet-B Library: Point compress/decompress using the wrong bit for sign
- CVE-2022-22999Cross-site Scripting Vulnerability in USB Backups App
- CVE-2022-23000Weak Default SSL use in Port Forwarding Service
- CVE-2022-22997Command Injection Vulnerability on My Cloud Home
- CVE-2022-22998Protecting AWS credentials stored in plaintext on My Cloud Home
- CVE-2022-22995Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk
- CVE-2022-22994Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices.
- CVE-2022-22993Limited Server-Side Request Forgery vulnerability on Western Digital My Cloud devices.
- CVE-2022-22988Insecure file and directory permissions on EdgeRover
- CVE-2022-22990Limited authentication bypass vulnerability on Western Digital My Cloud devices
- CVE-2022-22991Command injection through unsecured HTTP calls on Western Digital My Cloud devices
- CVE-2022-22989Pre-authenticated stack overflow vulnerability on FTP Service
- CVE-2018-1151The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrar