Skip to main content

My Cloud Ex4100

2 CVEs product

Monthly

CVE-2018-17153 Sep 18, 15:29 CRITICAL POC THREAT Emergency

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass My Cloud Wdbctl0020Hwt Firmware My Cloud Pr4100 My Cloud Pr2100 Firmware My Cloud Mirror Gen 2 Firmware +9
NVD
CVSS 3.0
9.8
EPSS
86.6%
CVE-2019-9951 Apr 24, 18:29 CRITICAL Act Now

Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP File Upload My Cloud Firmware My Cloud Pr4100 My Cloud Pr2100 Firmware +7
NVD GitHub
CVSS 3.0
9.8
EPSS
1.7%
EPSS 87% CVSS 9.8
CRITICAL POC THREAT Emergency

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass My Cloud Wdbctl0020Hwt Firmware My Cloud Pr4100 +11
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP File Upload My Cloud Firmware +9
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy