Rezultati pretraživanja za 'Proizvođač: westerndigital'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-22999 | 4.8 | Western Digital My Cloud devices are vulnerable to a cross side scripting vulnerability that can allow a malicious user with elevated privileges access to drives being backed up to construct and inject JavaScript payloads into an authenticated user's | 2022-08-01 18:53:00 | 2022-07-25 19:15:00 |
| CVE-2022-22997 | 7.5 | Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 bucket that potentially allowed an attacker to execute unsigned code on My Cloud Home devices. | 2022-07-20 15:24:00 | 2022-07-12 21:15:00 |
| CVE-2022-22998 | 5.0 | Implemented protections on AWS credentials that were not properly protected. | 2022-07-20 12:43:00 | 2022-07-12 21:15:00 |
| CVE-2021-35941 | 5.0 | Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an administrator API that can perform a system factory restore without authentication, as exploited in the wild in June 2021, a different vulnerability than C | 2022-07-12 17:42:00 | 2021-06-29 21:15:00 |
| CVE-2021-33205 | 6.5 | Western Digital EdgeRover before 0.25 has an escalation of privileges vulnerability where a low privileged user could load malicious content into directories with higher privileges, because of how Node.js is used. An attacker can gain admin privilege | 2022-07-12 17:42:00 | 2021-06-11 12:15:00 |
| CVE-2020-28970 | 7.5 | An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to execute privileged commands on the device via a cookie. (In addition, an upload e | 2022-04-26 16:57:00 | 2020-12-01 16:15:00 |
| CVE-2020-28940 | 7.5 | On Western Digital My Cloud OS 5 devices before 5.06.115, the NAS Admin dashboard has an authentication bypass vulnerability that could allow an unauthenticated user to execute privileged commands on the device. | 2022-04-26 16:35:00 | 2020-12-01 16:15:00 |
| CVE-2020-28971 | 7.5 | An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to execute privileged commands on the device via a cookie, because of insufficient v | 2022-04-26 16:11:00 | 2020-12-01 16:15:00 |
| CVE-2022-22996 | 6.9 | The G-RAID 4/8 Software Utility setups for Windows were affected by a DLL hijacking vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the system user. | 2022-04-07 17:56:00 | 2022-03-30 16:15:00 |
| CVE-2022-22993 | 8.3 | A limited SSRF vulnerability was discovered on Western Digital My Cloud devices that could allow an attacker to impersonate a server and reach any page on the server by bypassing access controls. The vulnerability was addressed by creating a whitelis | 2022-03-18 20:51:00 | 2022-01-28 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/8
Zapisa po stranici: