Lucene search

K
nvd[email protected]NVD:CVE-2021-36226
HistoryFeb 06, 2023 - 2:15 p.m.

CVE-2021-36226

2023-02-0614:15:08
CWE-347
web.nvd.nist.gov
western digital my cloud
firmware upgrade
cryptographically signed

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.7%

Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files.

Affected configurations

NVD
Node
westerndigitalmy_cloud_osRange<5.02.104
AND
westerndigitalmy_cloud_pr4100Match-

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.7%

Related for NVD:CVE-2021-36226