PatchTheCVEmy cloud os vulnerabilities and fixes
Recent CVEs affecting my cloud os, with upgrade or downgrade steps. 9 tracked.
Also searched as: mycloudos.
my cloud os has 9 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 9. Most recent: 2023-07-01. Highest priority: CVE-2021-36224 (score 61/100).
- CVE-2023-22814 CRITICAL 10.0 UPGRADE An authentication bypass issue via spoofing was discovered in the token-based authentication mechanism that co
- CVE-2022-29842 CRITICAL 9.8 UPGRADE Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability that could a
- CVE-2022-29841 HIGH 8.0 UPGRADE Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that
- CVE-2022-29840 MEDIUM 5.1 UPGRADE Server-Side Request Forgery (SSRF) vulnerability that could allow a rogue server on the local network to modif
- CVE-2022-29839 MEDIUM 4.1 UPGRADE Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Clo
- CVE-2022-29838 MEDIUM 4.3 UPGRADE Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My C
- CVE-2021-36226 CRITICAL 9.8 UPGRADE Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files.
- CVE-2021-36225 HIGH 8.8 UPGRADE Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated
- CVE-2021-36224 CRITICAL 9.8 UPGRADE Western Digital My Cloud devices before OS5 have a nobody account with a blank password.
FAQ
How do I fix my cloud os vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is my cloud os being exploited right now?
None of the tracked my cloud os CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which my cloud os CVE should I patch first?
CVE-2021-36224 currently ranks highest (61/100): Western Digital My Cloud devices before OS5 have a nobody account with a blank password..