Western Digital vulnerabilities
44 published CVEs name Western Digital among the affected products.
- 44Published CVEs44 of them scored
- 1Last 12 monthspublished in the last year
- 8Critical11 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-30248
DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary code via placement…
Western Digital · WD Discovery
High8.9 - CVE-2025-30247
An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to…
Western Digital · My Cloud
Critical9.3 - CVE-2024-22170
Unchecked buffer in Dynamic DNS client
Western Digital · My Cloud
Critical9.2 - CVE-2024-22169
Misconfiguration in node.js causing a code execution in WD Discovery
Western Digital · WD Discovery
High7.1 - CVE-2024-22168
Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps
Western Digital · My Cloud Home web app
Medium5.9 - CVE-2023-22819
Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
Western Digital · My Cloud OS 5
Medium4.9 - CVE-2023-22817
Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
Western Digital · My Cloud OS 5
Medium5.5 - CVE-2023-22814
Authentication Bypass issue in My Cloud OS 5 devices
Western Digital · My Cloud OS 5
Critical10.0 - CVE-2023-22815
Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices
Western Digital · My Cloud OS 5
Medium6.2 - CVE-2023-22816
Limited Post-Authentication Remote Command Injection in My Cloud Products
Western Digital · My Cloud OS 5
Medium6.0