How many CVEs does Western Digital my cloud pr4100 have?

Western Digital my cloud pr4100 has 44 published CVE records since 2017.

How many Western Digital my cloud pr4100 CVEs are in CISA KEV?

None of Western Digital my cloud pr4100's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Western Digital my cloud pr4100 vulnerabilities?

Yes — 11 of Western Digital my cloud pr4100's CVEs have a known public exploit.

Which versions of Western Digital my cloud pr4100 are affected?

4 distinct Western Digital my cloud pr4100 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Western Digital my cloud pr4100 CVEs?

Western Digital my cloud pr4100's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-287 (Improper Authentication), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-59 (Improper Link Resolution Before File Access ('Link Following')).

How many critical Western Digital my cloud pr4100 vulnerabilities are there?

Western Digital my cloud pr4100 has 27 critical and 9 high-severity CVEs.

What is the average severity of Western Digital my cloud pr4100 CVEs?

The average CVSS base score across Western Digital my cloud pr4100's scored CVEs is 8.8.

Western Digital my cloud pr4100 Vulnerabilities: CVEs, CISA KEV & Security Advisories

Medium vulnerability · 2024-02-05

CVE-2023-22819

Patch

CWE-770

Medium · CVSS 4.9

EPSS 0.8% (56th pct)2024-02-05

Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products

CVE-2023-22817

Patch

CWE-918

Medium · CVSS 5.5

EPSS 0.2% (14th pct)2024-02-05

Critical vulnerability · 2023-06-30

CVE-2023-22814

Patch

CWE-290

Critical · CVSS 10.0

EPSS 0.7% (52th pct)2023-06-30

Medium vulnerability · 2023-06-30

CVE-2023-22815

Patch

CWE-78

Medium · CVSS 6.7

EPSS 1.3% (70th pct)2023-06-30

High vulnerability · 2023-06-30

CVE-2023-22816

Patch

CWE-78

High · CVSS 8.8

EPSS 0.9% (58th pct)2023-06-30

Critical vulnerability · 2023-06-12

CVE-2022-36331

Patch

CWE-290

Critical · CVSS 10.0

EPSS 0.6% (47th pct)2023-06-12

Medium vulnerability · 2023-05-18

CVE-2022-36328

Patch

CWE-22

Medium · CVSS 5.8

EPSS 0.8% (55th pct)2023-05-18

Critical vulnerability · 2023-05-18

CVE-2022-36327

Patch

CWE-22

Critical · CVSS 9.8

EPSS 1.5% (73th pct)2023-05-18

Medium vulnerability · 2023-05-18

CVE-2022-36326

Patch

CWE-400

Medium · CVSS 4.9

EPSS 0.6% (46th pct)2023-05-18

Medium vulnerability · 2023-05-10

CVE-2022-29840

Patch

CWE-918

Medium · CVSS 5.5

EPSS 0.1% (3th pct)2023-05-10

Critical vulnerability · 2023-05-10

CVE-2022-29841

Patch

CWE-78

Critical · CVSS 9.8

EPSS 1.4% (73th pct)2023-05-10

Critical vulnerability · 2023-05-10

CVE-2022-29842

Patch

CWE-77

Critical · CVSS 9.8

EPSS 1.8% (78th pct)2023-05-10

Critical vulnerability · 2023-02-06

CVE-2021-36226

Public exploit

Patch

CWE-347

Critical · CVSS 9.8

EPSS 0.8% (56th pct)2023-02-06

High vulnerability · 2023-02-06

CVE-2021-36225

Public exploit

Patch

CWE-862

High · CVSS 8.8

EPSS 1.0% (64th pct)2023-02-06

Critical vulnerability · 2023-02-06

CVE-2021-36224

Public exploit

Patch

CWE-798

Critical · CVSS 9.8

EPSS 1.2% (67th pct)2023-02-06

Critical vulnerability · 2023-01-25

CVE-2022-29844

Patch

CWE-23

Critical · CVSS 9.8

EPSS 36.4% (98th pct)2023-01-25

Critical vulnerability · 2023-01-25

CVE-2022-29843

Patch

CWE-78

Critical · CVSS 9.8

EPSS 1.2% (67th pct)2023-01-25

Medium vulnerability · 2022-12-09

CVE-2022-29839

Patch

CWE-522

Medium · CVSS 5.5

EPSS 0.1% (3th pct)2022-12-09

Medium vulnerability · 2022-12-09

CVE-2022-29838

Patch

CWE-287

Medium · CVSS 4.6

EPSS 0.3% (18th pct)2022-12-09

High vulnerability · 2022-07-25

CVE-2022-22999

Patch

CWE-79

High · CVSS 8.2

EPSS 0.4% (30th pct)2022-07-25

High vulnerability · 2022-07-25

CVE-2022-23000

Patch

CWE-757

High · CVSS 7.8

EPSS 0.2% (8th pct)2022-07-25

Critical vulnerability · 2022-03-25

CVE-2022-22995

Patch

CWE-59

Critical · CVSS 10.0

EPSS 2.7% (86th pct)2022-03-25

Critical vulnerability · 2022-01-28

CVE-2022-22994

Patch

CWE-345

Critical · CVSS 9.8

EPSS 1.9% (79th pct)2022-01-28

Command Injection Remote Code Execution vulnerability on Western Digital My Cloud devices.

CVE-2022-22992

Patch

CWE-116

Critical · CVSS 9.8

EPSS 2.3% (83th pct)2022-01-28

Limited Server-Side Request Forgery vulnerability on Western Digital My Cloud devices.

CVE-2022-22993

Patch

CWE-918

High · CVSS 8.8

EPSS 0.8% (54th pct)2022-01-28

High vulnerability · 2022-01-13

CVE-2022-22990

Patch

CWE-287

High · CVSS 8.8

EPSS 2.1% (82th pct)2022-01-13

Command injection through unsecured HTTP calls on Western Digital My Cloud devices

CVE-2022-22991

Patch

CWE-78

High · CVSS 8.8

EPSS 1.3% (71th pct)2022-01-13

Critical vulnerability · 2022-01-13

CVE-2022-22989

Patch

CWE-121

Critical · CVSS 9.8

EPSS 1.3% (70th pct)2022-01-13

High vulnerability · 2021-03-10

CVE-2021-3310

Patch

CWE-59

High · CVSS 7.8

EPSS 1.0% (62th pct)2021-03-10

Critical vulnerability · 2020-12-11

CVE-2020-29563

Patch

CWE-287

Critical · CVSS 9.8

EPSS 2.9% (87th pct)2020-12-11

Western Digital my cloud pr4100 Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other Western Digital products

Frequently asked questions

References

Track Western Digital my cloud pr4100 vulnerabilities