Skip to main content

My Cloud Ex4100

2 CVEs product

Monthly

CVE-2019-9951 CRITICAL Act Now

Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP File Upload My Cloud Mirror Gen 2 Firmware My Cloud Ex2 Ultra Firmware My Cloud Ex2100 Firmware +6
NVD GitHub
CVSS 3.0
9.8
EPSS
1.7%
CVE-2018-17153 CRITICAL POC THREAT Emergency

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass My Cloud Wdbctl0020Hwt Firmware My Cloud Pr4100 My Cloud Pr2100 Firmware My Cloud Mirror Gen 2 Firmware +8
NVD
CVSS 3.0
9.8
EPSS
86.6%
EPSS 2% CVSS 9.8
CRITICAL Act Now

Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP File Upload My Cloud Mirror Gen 2 Firmware +8
NVD GitHub
EPSS 87% CVSS 9.8
CRITICAL POC THREAT Emergency

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass My Cloud Wdbctl0020Hwt Firmware My Cloud Pr4100 +10
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy