Rezultati pretraživanja za 'Proizvođač: westerndigital'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2023-22812 | 7.4 | SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data. | 2023-11-04 02:51:00 | 2023-03-24 20:15:00 |
| CVE-2022-29835 | 5.3 | WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereb | 2023-07-21 16:55:00 | 2022-09-19 20:15:00 |
| CVE-2022-22992 | 10.0 | A command injection remote code execution vulnerability was discovered on Western Digital My Cloud Devices that could allow an attacker to execute arbitrary system commands on the device. The vulnerability was addressed by escaping individual argumen | 2023-07-11 20:21:00 | 2022-01-28 20:15:00 |
| CVE-2022-22990 | 8.3 | A limited authentication bypass vulnerability was discovered that could allow an attacker to achieve remote code execution and escalate privileges on the My Cloud devices. Addressed this vulnerability by changing access token validation logic and rew | 2023-07-11 19:56:00 | 2022-01-13 21:15:00 |
| CVE-2020-10951 | 4.3 | Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages. | 2023-03-01 03:06:00 | 2020-04-15 20:15:00 |
| CVE-2021-36224 | 9.8 | Western Digital My Cloud devices before OS5 have a nobody account with a blank password. | 2023-02-14 21:41:00 | 2023-02-06 14:15:00 |
| CVE-2022-23005 | 8.7 | Western Digital has identified a weakness in the UFS standard that could result in a security vulnerability. This vulnerability may exist in some systems where the Host boot ROM code implements the UFS Boot feature to boot from UFS compliant storage | 2023-02-08 19:14:00 | 2023-01-23 22:15:00 |
| CVE-2022-29844 | 9.8 | A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to read and write arbitrary files. This could lead to a full NAS compromise and would give remote execution cap | 2023-02-01 16:48:00 | 2023-01-26 21:15:00 |
| CVE-2022-29843 | 9.8 | A command injection vulnerability in the DDNS service configuration of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to execute code in the context of the root user. | 2023-02-01 16:47:00 | 2023-01-26 21:15:00 |
| CVE-2022-29838 | 4.6 | Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devices allows insecure direct access to the drive information in the case of a device reset. This issue affects: Western Digital My Cl | 2022-12-12 17:45:00 | 2022-12-09 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/8
Zapisa po stranici: