My Cloud OS 5 vulnerabilities

2 known vulnerabilities in My Cloud OS 5 from Westerndigital. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  My Cloud OS 5: Authentication Bypass by Spoofing

  CVE-2023-22814Jul 1, 2023Western Digital

  An authentication bypass issue via spoofing was discovered in the token-based authentication mechanism that could allow an attacker to carry out an impersonation attack. This issue affects My Cloud OS 5 devices: before 5.26.202.

• 8.8 High severity

  My Cloud OS 5: Improper Neutralization of Special Elements used in a Command

  CVE-2023-22816Jun 30, 2023Western Digital

  A post-authentication remote command injection vulnerability in a CGI file in Western Digital My Cloud OS 5 devices that could allow an attacker to build files with redirects and execute larger payloads. This issue affects My Cloud OS 5 devices: before 5.26.30