Western Digital vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 202332
3. 20243
4. 20246
5. 20262

Newest CVEs

• CVE-2025-30248

  DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary code via placement…

  Western Digital · WD Discovery

  High8.9
• CVE-2025-30247

  An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to…

  Western Digital · My Cloud

  Critical9.3
• CVE-2024-22170

  Unchecked buffer in Dynamic DNS client

  Western Digital · My Cloud

  Critical9.2
• CVE-2024-22169

  Misconfiguration in node.js causing a code execution in WD Discovery

  Western Digital · WD Discovery

  High7.1
• CVE-2024-22168

  Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps

  Western Digital · My Cloud Home web app

  Medium5.9
• CVE-2023-22819

  Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products

  Western Digital · My Cloud OS 5

  Medium4.9
• CVE-2023-22817

  Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products

  Western Digital · My Cloud OS 5

  Medium5.5
• CVE-2023-22814

  Authentication Bypass issue in My Cloud OS 5 devices

  Western Digital · My Cloud OS 5

  Critical10.0
• CVE-2023-22815

  Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices

  Western Digital · My Cloud OS 5

  Medium6.2
• CVE-2023-22816

  Limited Post-Authentication Remote Command Injection in My Cloud Products

  Western Digital · My Cloud OS 5

  Medium6.0