My Cloud Os

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:westerndigital:my_cloud_os:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorWesterndigital (31f3ce61-d65f-59c0-8a6e-4a83464a1be1)
ProductMy Cloud Os (f3fbbb1a-4b6f-5227-87b6-856d85c87035)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-22816 vulnerable 2026-06-08 05:54:27.135431 Limited Post-Authentication Remote Command Injection in My Cloud Products
MEDIUM (6)
A post-authentication remote command injection vulnerability in a CGI file in Western Digital My Cloud OS 5 devices that could allow an attacker to build files with redirects and execute larger payloads. This issue affects My Cloud OS 5 devices: before 5.26.300.
Published: 2023-06-30T21:01:16.209Z
Updated: 2024-09-09T14:39:16.112Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22815 vulnerable 2026-06-08 05:54:27.134753 Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices
MEDIUM (6.2)
Post-authentication remote command injection vulnerability in Western Digital My Cloud OS 5 devices that could allow an attacker to execute code in the context of the root user on vulnerable CGI files. This vulnerability can only be exploited over the network and the attacker must already have admin/root privileges to carry out the exploit. An authentication bypass is required for this exploit, thereby making it more complex. The attack may not require user interaction. Since an attacker must already be authenticated, the confidentiality impact is low while the integrity and availability impact is high.  This issue affects My Cloud OS 5 devices: before 5.26.300.
Published: 2023-06-30T21:07:36.424Z
Updated: 2024-11-06T19:48:30.851Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22814 vulnerable 2026-06-08 05:54:27.127912 Authentication Bypass issue in My Cloud OS 5 devices
CRITICAL (10)
An authentication bypass issue via spoofing was discovered in the token-based authentication mechanism that could allow an attacker to carry out an impersonation attack. This issue affects My Cloud OS 5 devices: before 5.26.202.
Published: 2023-06-30T23:05:43.130Z
Updated: 2024-11-26T16:09:14.746Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29842 vulnerable 2026-06-08 05:42:48.922657 Command Injection Vulnerability in Western Digital My Cloud devices
CRITICAL (9.8)
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability that could allow an attacker to execute code in the context of the root user on a vulnerable CGI file was discovered in Western Digital My Cloud OS 5 devicesThis issue affects My Cloud OS 5: before 5.26.119.
Published: 2023-05-10T20:53:19.844Z
Updated: 2025-01-24T21:00:19.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29841 vulnerable 2026-06-08 05:42:48.921744 OS Command Injection vulnerability in Western Digital My Cloud devices
HIGH (8)
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that was caused by a command that read files from a privileged location and created a system command without sanitizing the read data. This command could be triggered by an attacker remotely to cause code execution and gain a reverse shell in Western Digital My Cloud OS 5 devices.This issue affects My Cloud OS 5: before 5.26.119.
Published: 2023-05-10T21:04:49.083Z
Updated: 2025-01-24T21:01:04.089Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29840 vulnerable 2026-06-08 05:42:48.920841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29839 vulnerable 2026-06-08 05:42:48.918002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29838 vulnerable 2026-06-08 05:42:48.910410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22994 vulnerable 2026-06-08 05:40:55.935597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22993 vulnerable 2026-06-08 05:40:55.934718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22992 vulnerable 2026-06-08 05:40:55.930356 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22991 vulnerable 2026-06-08 05:40:55.925352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22990 vulnerable 2026-06-08 05:40:55.924518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22989 vulnerable 2026-06-08 05:40:55.916755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3310 vulnerable 2026-06-08 05:33:51.146872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36226 vulnerable 2026-06-08 05:32:50.127247 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36225 vulnerable 2026-06-08 05:32:50.126569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36224 vulnerable 2026-06-08 05:32:50.124686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.