SanDisk vulnerabilities

CVEs per yearBy the year they were published

1. 20223
2. 20239
3. 20244

Newest CVEs

• CVE-2024-22168

  Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps

  Western Digital · My Cloud Home web app

  Medium5.9
• CVE-2024-22167

  SanDisk PrivateAccess DLL Hijacking Vulnerability

  SanDisk · PrivateAccess Windows App

  High7.9
• CVE-2023-22819

  Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products

  Western Digital · My Cloud OS 5

  Medium4.9
• CVE-2023-22817

  Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products

  Western Digital · My Cloud OS 5

  Medium5.5
• CVE-2023-22818

  Multiple DLL Search Order hijacking Vulnerabilities in SanDisk Security Installer for Windows

  SanDisk · SanDisk Security Installer for Windows

  High7.3
• CVE-2022-36331

  Impersonation attack causing an Authentication Bypass on Western Digital devices

  Western Digital · My Cloud OS 5

  Critical10.0
• CVE-2022-36328

  Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices

  Western Digital · My Cloud Home and My Cloud Home Duo

  Medium5.8
• CVE-2022-36327

  Path traversal vulnerability leading to an arbitrary file write in Western Digital devices

  Western Digital · My Cloud Home and My Cloud Home Duo

  Medium5.8
• CVE-2022-36326

  Resource Exhaustion Vulnerability in Western Digital devices

  Western Digital · My Cloud Home and My Cloud Home Duo

  Medium4.4
• CVE-2022-36329

  Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices

  Western Digital · My Cloud Home and My Cloud Home Duo

  Medium4.4