PatchTheCVEwestern digital vulnerabilities
Recent CVEs affecting western digital products. 8 tracked.
western digital has 8 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 3. Most recent: 2020-02-20. Highest priority: CVE-2018-17153 (score 69/100).
- CVE-2020-8990 CRITICAL 9.1 UPGRADE UPGRADE Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation.
- CVE-2019-9951 CRITICAL 9.8 UPGRADE UPGRADE Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud
- CVE-2019-18931 HIGH 8.8 MITIGATE Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointe
- CVE-2019-18930 HIGH 8.8 MITIGATE Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely ex
- CVE-2019-18929 HIGH 8.8 MITIGATE Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely e
- CVE-2018-17153 CRITICAL 9.8 UPGRADE UPGRADE It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication by
- CVE-2016-10108 CRITICAL 9.8 DOWNGRADE Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/googl
- CVE-2016-10107 CRITICAL 9.8 DOWNGRADE Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php
FAQ
How do I fix western digital vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is western digital being exploited right now?
None of the tracked western digital CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which western digital CVE should I patch first?
CVE-2018-17153 currently ranks highest (69/100): It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication by.