Westerndigital vulnerabilitiesNone on the known-exploited list.
Westerndigital has 83 published vulnerabilities across 210 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is My Cloud Pr4100, with 42. If you run Westerndigital software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Westerndigital products have the most vulnerabilities?
My Cloud Pr4100 leads with 42 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Westerndigital vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Westerndigital's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Westerndigital flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 73%CVE-2017-17560Critical
An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices.
- 36%CVE-2022-29844Critical
A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to read and write arbitrary files.
- 30%CVE-2018-18472Critical
Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/language_configuration language parameter.
- 13%CVE-2021-35941High
Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an administrator API that can perform a system factory restore without authentication, as exploited in the wild in June...
- 9.0%CVE-2014-2846High
Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual appliance (AVA) with firmware before 10.2.9 allows remote attackers to read arbitrary files and execute arbitrary PHP code...
- 8.4%CVE-2018-1151Critical
The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to...
- 7.5%CVE-2020-27158Critical
Addressed remote code execution vulnerability in cgi_api.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114.
- 7.1%CVE-2019-16399Critical
Western Digital WD My Book World through II 1.02.12 suffers from Broken Authentication, which allows an attacker to access the /admin/ directory without credentials.
- 6.2%CVE-2020-27159Critical
Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices prior to 5.04.114
- 6.2%CVE-2020-27744Critical
An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114.
All Westerndigital products we track.
68 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- My Cloud Dl2100my_cloud_dl210028 vulnerabilities1 version
- My Cloudmy_cloud25 vulnerabilities2 versions
- My Cloud OSmy_cloud_os18 vulnerabilities27 versions
- My Cloud Homemy_cloud_home16 vulnerabilities3 versions
- My Cloud Home Firmwaremy_cloud_home_firmware14 vulnerabilities14 versions
- My Cloud Home Duo Firmwaremy_cloud_home_duo_firmware13 vulnerabilities14 versions
- My Cloud Firmwaremy_cloud_firmware12 vulnerabilities7 versions
- Sandisk Ibisandisk_ibi12 vulnerabilities2 versions
- My Cloud Pr4100 Firmwaremy_cloud_pr4100_firmware11 vulnerabilities9 versions
- Sandisk Ibi Firmwaresandisk_ibi_firmware11 vulnerabilities6 versions
- My Cloud Dl2100 Firmwaremy_cloud_dl2100_firmware10 vulnerabilities8 versions
- My Cloud Dl4100 Firmwaremy_cloud_dl4100_firmware10 vulnerabilities8 versions
- My Cloud Ex2 Ultra Firmwaremy_cloud_ex2_ultra_firmware10 vulnerabilities8 versions
- My Cloud Ex2100 Firmwaremy_cloud_ex2100_firmware10 vulnerabilities8 versions
- My Cloud Ex4100 Firmwaremy_cloud_ex4100_firmware10 vulnerabilities8 versions
- My Cloud Pr2100 Firmwaremy_cloud_pr2100_firmware9 vulnerabilities8 versions
- My Cloud OS 5my_cloud_os_58 vulnerabilities7 versions
- My Cloud Mirror G2 Firmwaremy_cloud_mirror_g2_firmware7 vulnerabilities4 versions
- Sweet Bsweet_b4 vulnerabilities2 versions
- Sandisk X600 Sd9sb8w-128g Firmwaresandisk_x600_sd9sb8w-128g_firmware3 vulnerabilities1 version
- Sandisk X600 Sd9sb8w-1t00 Firmwaresandisk_x600_sd9sb8w-1t00_firmware3 vulnerabilities1 version
- Sandisk X600 Sd9sb8w-256g Firmwaresandisk_x600_sd9sb8w-256g_firmware3 vulnerabilities1 version
- Sandisk X600 Sd9sb8w-2t00 Firmwaresandisk_x600_sd9sb8w-2t00_firmware3 vulnerabilities1 version
- Sandisk X600 Sd9sb8w-512g Firmwaresandisk_x600_sd9sb8w-512g_firmware3 vulnerabilities1 version
This directory lists the 68 Westerndigital products with at least one tracked version, of 210 in our catalogue.
Running Westerndigital? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jquery/uploader/multi_uploadify.php, provides multipart upload functionality that is accessible without authentication and can be used to place a file anywhere on the device's file system. This allows an attacker the ability to upload a PHP shell onto the device and obtain arbitrary code execution as root.
- Matched to
- Westerndigital on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 83 published vulnerabilities across 210 products and 232 versions from Westerndigital.
None of Westerndigital's vulnerabilities is on the list of flaws known to be exploited today.
My Cloud Pr4100, with 42 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Westerndigital products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.