Western Digital My Cloud OS 5.26.119

CPE Details

Western Digital My Cloud OS 5.26.119
westerndigital
my_cloud_os
5.26.119
2023-05-18
08h54 +00:00
2023-07-29
01h09 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:o:westerndigital:my_cloud_os:5.26.119:*:*:*:*:*:*:*

Informations

Vendor

westerndigital

Product

my_cloud_os

Version

5.26.119

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2023-22814 2023-06-30 23h05 +00:00 An authentication bypass issue via spoofing was discovered in the token-based authentication mechanism that could allow an attacker to carry out an impersonation attack. This issue affects My Cloud OS 5 devices: before 5.26.202.
10
Critique
CVE-2023-22815 2023-06-30 21h07 +00:00 Post-authentication remote command injection vulnerability in Western Digital My Cloud OS 5 devices that could allow an attacker to execute code in the context of the root user on vulnerable CGI files. This vulnerability can only be exploited over the network and the attacker must already have admin/root privileges to carry out the exploit. An authentication bypass is required for this exploit, thereby making it more complex. The attack may not require user interaction. Since an attacker must already be authenticated, the confidentiality impact is low while the integrity and availability impact is high.  This issue affects My Cloud OS 5 devices: before 5.26.300.
6.7
Moyen
CVE-2023-22816 2023-06-30 21h01 +00:00 A post-authentication remote command injection vulnerability in a CGI file in Western Digital My Cloud OS 5 devices that could allow an attacker to build files with redirects and execute larger payloads. This issue affects My Cloud OS 5 devices: before 5.26.300.
8.8
Haute
CVE-2022-29840 2023-05-10 22h09 +00:00 Server-Side Request Forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL to point back to the loopback adapter was addressed in Western Digital My Cloud OS 5 devices. This could allow the URL to exploit other vulnerabilities on the local server.This issue affects My Cloud OS 5 devices before 5.26.202.
5.5
Moyen