Western Digital My Cloud

• CVE-2025-30247 Critical 9.3 An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a speci 1.1%
• CVE-2024-22170 Critical 9.2 Unchecked buffer in Dynamic DNS client 0.5%
• CVE-2022-29843 Medium 6.2 Western Digital My Cloud OS 5 devices Command Injection Vulnerability 1.2%
• CVE-2022-29844 Medium 6.7 Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp 36.4%
• CVE-2022-29838 Medium 4.3 Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices 0.3%
• CVE-2022-29839 Medium 4.1 Remote Backups Application Discloses Stored Credentials 0.1%
• CVE-2022-22999 High 8.2 Cross-site Scripting Vulnerability in USB Backups App 0.4%
• CVE-2022-23000 High 7.3 Weak Default SSL use in Port Forwarding Service 0.2%
• CVE-2022-22995 Critical 10.0 Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk 2.7%
• CVE-2022-22994 High 8.8 Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices. 1.9%
• CVE-2022-22993 High 7.8 Limited Server-Side Request Forgery vulnerability on Western Digital My Cloud devices. 0.8%
• CVE-2022-22990 High 7.8 Limited authentication bypass vulnerability on Western Digital My Cloud devices 2.2%
• CVE-2022-22991 High 7.8 Command injection through unsecured HTTP calls on Western Digital My Cloud devices 1.3%
• CVE-2022-22989 Critical 9.8 Pre-authenticated stack overflow vulnerability on FTP Service 1.4%