Rezultati pretraživanja za 'Proizvođač: westerndigital'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-15816 | 6.5 | In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could potentially execute code in the application's process through library injection by using DYLD environment variables. | 2021-07-21 11:39:00 | 2020-07-17 20:15:00 |
| CVE-2018-18472 | 10.0 | Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/language_configuration language parameter. It can be triggered by anyone who knows the IP ad | 2021-06-25 10:15:00 | 2019-06-19 16:15:00 |
| CVE-2021-3310 | 4.6 | Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure (by reading local files). | 2021-03-17 17:42:00 | 2021-03-10 05:15:00 |
| CVE-2020-12830 | 7.5 | Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devices before 5.04.114. | 2020-11-02 17:09:00 | 2020-10-27 20:15:00 |
| CVE-2019-13466 | 5.0 | Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control. The “generate reports” archive is protected with a hard-coded password. An application update that addresses the protection of archiv | 2020-08-24 17:37:00 | 2019-09-30 18:15:00 |
| CVE-2019-16399 | 7.5 | Western Digital WD My Book World through II 1.02.12 suffers from Broken Authentication, which allows an attacker to access the /admin/ directory without credentials. An attacker can easily enable SSH from /admin/system_advanced.php?lang=en and login | 2020-08-24 17:37:00 | 2019-09-18 14:15:00 |
| CVE-2019-9950 | 7.5 | Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is affected by an authentication bypass vulnerability | 2020-08-24 17:37:00 | 2019-04-24 18:29:00 |
| CVE-2019-11686 | 2.1 | Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters (such as data encryption keys) to remain on the drive media after their intended | 2020-03-13 16:42:00 | 2020-03-10 13:15:00 |
| CVE-2019-10706 | 6.3 | Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device, and if extracted coul | 2020-03-13 16:23:00 | 2020-03-10 13:15:00 |
| CVE-2019-10705 | 4.3 | Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials. | 2020-03-13 14:47:00 | 2020-03-10 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/8
Zapisa po stranici: