Rezultati pretraživanja za 'Proizvođač: westerndigital'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-29839 | 5.5 | Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices that could allow an attacker who has gained access to a relevant endpoint to use that information to access protected data. This | 2022-12-12 17:44:00 | 2022-12-09 18:15:00 |
| CVE-2022-29837 | 7.8 | A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which could allow an attacker to initiate installation of custom ZIP packages and overwrite system files. This could potentially lead to | 2022-12-06 16:44:00 | 2022-12-01 17:15:00 |
| CVE-2022-29836 | 4.3 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability was discovered via an HTTP API on Western Digital My Cloud Home; My Cloud Home Duo; and SanDisk ibi devices that could allow an attacker to abuse certain par | 2022-11-15 14:51:00 | 2022-11-09 21:15:00 |
| CVE-2022-23006 | 6.7 | A stack-based buffer overflow vulnerability was found on Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi that could allow an attacker accessing the system locally to read information from /etc/version file. This vulnerability can on | 2022-10-03 18:40:00 | 2022-09-27 23:15:00 |
| CVE-2020-29563 | 7.5 | An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to gain access to the device. | 2022-08-06 03:52:00 | 2020-12-12 00:15:00 |
| CVE-2022-23004 | 5.3 | When computing a shared secret or point multiplication on the NIST P-256 curve using a public key with an X coordinate of zero, an error is returned from the library, and an invalid unreduced value is written to the output buffer. This may be leverag | 2022-08-05 18:49:00 | 2022-07-29 19:15:00 |
| CVE-2022-23003 | 5.3 | When computing a shared secret or point multiplication on the NIST P-256 curve that results in an X coordinate of zero, the resulting output is not properly reduced modulo the P-256 field prime and is invalid. The resulting output may cause an error | 2022-08-05 18:48:00 | 2022-07-29 19:15:00 |
| CVE-2022-23002 | 5.3 | When compressing or decompressing a point on the NIST P-256 elliptic curve with an X coordinate of zero, the resulting output is not properly reduced modulo the P-256 field prime and is invalid. The resulting output will cause an error when used in o | 2022-08-05 18:48:00 | 2022-07-29 19:15:00 |
| CVE-2022-23001 | 5.3 | When compressing or decompressing elliptic curve points using the Sweet B library, an incorrect choice of sign bit is used. An attacker with user level privileges and no other user's assistance can exploit this vulnerability with only knowledge of th | 2022-08-05 18:44:00 | 2022-07-29 19:15:00 |
| CVE-2022-23000 | 7.8 | The Western Digital My Cloud Web App [https://os5.mycloud.com/] uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead | 2022-08-03 18:30:00 | 2022-07-25 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/8
Zapisa po stranici: