Western Digital My Cloud PR2100
Approved changes feed: RSS · Atom
cpe:2.3:h:westerndigital:my_cloud_pr2100:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Westerndigital (31f3ce61-d65f-59c0-8a6e-4a83464a1be1) |
|---|---|
| Product | My Cloud Pr2100 (dbe35467-8eba-5357-b846-7f60effcae53) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-22817 |
not_vulnerable | 2026-06-08 05:54:27.142046 |
Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
MEDIUM (5.5)
Server-side request forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL using another DNS address to point back to the loopback adapter. This could then allow the URL to exploit other vulnerabilities on the local server. This was addressed by fixing DNS addresses that refer to loopback. This issue affects My Cloud OS 5 devices before 5.27.161, My Cloud Home, My Cloud Home Duo and SanDisk ibi devices before 9.5.1-104.
Published: 2024-02-05T21:26:42.020Z
Updated: 2024-08-02T10:20:31.069Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22816 |
not_vulnerable | 2026-06-08 05:54:27.135567 |
Limited Post-Authentication Remote Command Injection in My Cloud Products
MEDIUM (6)
A post-authentication remote command injection vulnerability in a CGI file in Western Digital My Cloud OS 5 devices that could allow an attacker to build files with redirects and execute larger payloads.
This issue affects My Cloud OS 5 devices: before 5.26.300.
Published: 2023-06-30T21:01:16.209Z
Updated: 2024-09-09T14:39:16.112Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22815 |
not_vulnerable | 2026-06-08 05:54:27.134908 |
Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices
MEDIUM (6.2)
Post-authentication remote command injection vulnerability in Western Digital My Cloud OS 5 devices that could allow an attacker to execute code in the context of the root user on vulnerable CGI files. This vulnerability can only be exploited over the network and the attacker must already have admin/root privileges to carry out the exploit. An authentication bypass is required for this exploit, thereby making it more complex. The attack may not require user interaction. Since an attacker must already be authenticated, the confidentiality impact is low while the integrity and availability impact is high.
This issue affects My Cloud OS 5 devices: before 5.26.300.
Published: 2023-06-30T21:07:36.424Z
Updated: 2024-11-06T19:48:30.851Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22814 |
not_vulnerable | 2026-06-08 05:54:27.132991 |
Authentication Bypass issue in My Cloud OS 5 devices
CRITICAL (10)
An authentication bypass issue via spoofing was discovered in the token-based authentication mechanism that could allow an attacker to carry out an impersonation attack.
This issue affects My Cloud OS 5 devices: before 5.26.202.
Published: 2023-06-30T23:05:43.130Z
Updated: 2024-11-26T16:09:14.746Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36331 |
not_vulnerable | 2026-06-08 05:46:06.927178 |
Impersonation attack causing an Authentication Bypass on Western Digital devices
CRITICAL (10)
Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attack that could allow an unauthenticated attacker to gain access to user data.
This issue affects My Cloud OS 5 devices: before 5.25.132; My Cloud Home and My Cloud Home Duo: before 8.13.1-102; SanDisk ibi: before 8.13.1-102.
Published: 2023-06-12T17:57:51.994Z
Updated: 2025-01-03T14:48:13.386Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36328 |
not_vulnerable | 2026-06-08 05:46:06.916788 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36327 |
not_vulnerable | 2026-06-08 05:46:06.915350 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36326 |
not_vulnerable | 2026-06-08 05:46:06.907006 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29844 |
not_vulnerable | 2026-06-08 05:42:48.935027 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29843 |
not_vulnerable | 2026-06-08 05:42:48.928017 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29842 |
not_vulnerable | 2026-06-08 05:42:48.923055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29841 |
not_vulnerable | 2026-06-08 05:42:48.922070 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29840 |
not_vulnerable | 2026-06-08 05:42:48.921256 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29839 |
not_vulnerable | 2026-06-08 05:42:48.918241 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29838 |
not_vulnerable | 2026-06-08 05:42:48.915768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23000 |
not_vulnerable | 2026-06-08 05:40:55.965928 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22999 |
not_vulnerable | 2026-06-08 05:40:55.961185 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22995 |
not_vulnerable | 2026-06-08 05:40:55.941810 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22994 |
not_vulnerable | 2026-06-08 05:40:55.935904 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22993 |
not_vulnerable | 2026-06-08 05:40:55.934948 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22992 |
not_vulnerable | 2026-06-08 05:40:55.934065 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22991 |
not_vulnerable | 2026-06-08 05:40:55.925589 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22990 |
not_vulnerable | 2026-06-08 05:40:55.924751 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22989 |
not_vulnerable | 2026-06-08 05:40:55.922687 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3310 |
not_vulnerable | 2026-06-08 05:33:51.151657 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-29563 |
not_vulnerable | 2026-06-08 05:24:58.418443 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28971 |
not_vulnerable | 2026-06-08 05:23:56.701626 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28970 |
not_vulnerable | 2026-06-08 05:23:56.700969 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28940 |
not_vulnerable | 2026-06-08 05:23:56.626517 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27744 |
not_vulnerable | 2026-06-08 05:23:53.100891 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27160 |
not_vulnerable | 2026-06-08 05:23:52.170705 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27159 |
not_vulnerable | 2026-06-08 05:23:52.169998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27158 |
not_vulnerable | 2026-06-08 05:23:52.169274 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25765 |
not_vulnerable | 2026-06-08 05:23:49.387533 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12830 |
not_vulnerable | 2026-06-08 05:17:59.426752 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9950 |
not_vulnerable | 2026-06-08 05:14:26.672209 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9949 |
not_vulnerable | 2026-06-08 05:14:26.669512 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.