My Cloud Ex2 Ultra Firmware Security Vulnerabilities and Issues — My Cloud Ex2 Ultra Firmware CVE List

Lucene search

WesterndigitalMy Cloud Ex2 Ultra Firmware

4 matches found

CVE•added 2019/05/23 2:29 p.m.•73 views

CVE-2019-9949

Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution (as root, starting from a low-privilege user session) vulnerability. The cgi-bin/webfile_mgr.cgi file allows arbitrary file write by ab...

9CVSS9.1AI score0.02635EPSS

CVE•added 2019/04/24 6:29 p.m.•42 views

CVE-2019-9950

Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is affected by an authentication bypass vulnerability. The login_mgr.cgi file checks credentials again...

9.8CVSS9.6AI score0.00795EPSS

CVE•added 2023/01/26 9:15 p.m.•41 views

CVE-2022-29844

A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to read and write arbitrary files. This could lead to a full NAS compromise and would give remote execution capabilities to the attacker.

9.8CVSS8.1AI score0.50972EPSS

CVE•added 2023/01/26 9:15 p.m.•39 views

CVE-2022-29843

A command injection vulnerability in the DDNS service configuration of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to execute code in the context of the root user.

9.8CVSS8.3AI score0.00636EPSS