WWestern Digital

Products

Exploited and recent CVEs

• CVE-2025-30248 High 8.9 DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary code via placement of a crafted dll in the installer's searc 0.6%
• CVE-2025-30247 Critical 9.3 An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a speci 1.1%
• CVE-2024-22170 Critical 9.2 Unchecked buffer in Dynamic DNS client 0.5%
• CVE-2024-22169 High 7.1 Misconfiguration in node.js causing a code execution in WD Discovery 0.3%
• CVE-2024-22168 Medium 5.9 Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps 0.3%
• CVE-2024-22168 Medium 5.9 Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps 0.3%
• CVE-2024-22168 Medium 5.9 Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps 0.3%
• CVE-2023-22819 Medium 4.9 Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products 0.8%
• CVE-2023-22819 Medium 4.9 Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products 0.8%
• CVE-2023-22817 Medium 5.5 Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products 0.2%
• CVE-2023-22817 Medium 5.5 Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products 0.2%
• CVE-2023-22814 Critical 10.0 Authentication Bypass issue in My Cloud OS 5 devices 0.7%
• CVE-2023-22815 Medium 6.2 Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices 1.3%
• CVE-2023-22816 Medium 6.0 Limited Post-Authentication Remote Command Injection in My Cloud Products 0.9%
• CVE-2022-36331 Critical 10.0 Impersonation attack causing an Authentication Bypass on Western Digital devices 0.6%
• CVE-2022-36331 Critical 10.0 Impersonation attack causing an Authentication Bypass on Western Digital devices 0.6%
• CVE-2022-36328 Medium 5.8 Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices 0.8%
• CVE-2022-36328 Medium 5.8 Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices 0.8%
• CVE-2022-36327 Medium 5.8 Path traversal vulnerability leading to an arbitrary file write in Western Digital devices 1.5%
• CVE-2022-36327 Medium 5.8 Path traversal vulnerability leading to an arbitrary file write in Western Digital devices 1.5%
• CVE-2022-36326 Medium 4.4 Resource Exhaustion Vulnerability in Western Digital devices 0.6%
• CVE-2022-36326 Medium 4.4 Resource Exhaustion Vulnerability in Western Digital devices 0.6%
• CVE-2022-29840 Medium 5.1 Server Side Request Forgery Vulnerability in Western Digital My Cloud Devices 0.1%
• CVE-2022-29841 High 8.0 OS Command Injection vulnerability in Western Digital My Cloud devices 1.4%
• CVE-2022-29842 Critical 9.8 Command Injection Vulnerability in Western Digital My Cloud devices 1.8%
• CVE-2022-36329 Medium 4.4 Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices 0.3%
• CVE-2022-36330 Low 1.9 Buffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices 0.6%
• CVE-2023-22813 Low 3.3 Device API endpoint missing access controls on Western Digital Mobile and Web Apps 0.5%
• CVE-2023-22813 Low 3.3 Device API endpoint missing access controls on Western Digital Mobile and Web Apps 0.5%
• CVE-2023-22813 Low 3.3 Device API endpoint missing access controls on Western Digital Mobile and Web Apps 0.5%