Western Digital Vulnerabilities and Affected Products
Vulnerabilities associated with wd_my_book_live_firmware.
Products
Clear product- My Cloud14 vulnerabilities
- My Cloud OS 512 vulnerabilities
- My Cloud Home6 vulnerabilities
- My Cloud Home and My Cloud Home Duo6 vulnerabilities
- Sweet B Library4 vulnerabilities
- WD Discovery3 vulnerabilities
- My Cloud Home & Duo2 vulnerabilities
- My Cloud Home Web App2 vulnerabilities
- EdgeRover1 vulnerability
- My Cloud Home Duo1 vulnerability
- My Cloud Home Mobile App1 vulnerability
- My Cloud OS 5 Mobile App1 vulnerability
- My Cloud OS 5 Web App1 vulnerability
- My Cloud web app1 vulnerability
- my_book_live_firmware1 vulnerability
- my_cloud_pr4100_firmware1 vulnerability
- mycloud_nas1 vulnerability
- TV Live Hub1 vulnerability
- TV Media Player1 vulnerability
- WD Cloud web app1 vulnerability
- wd_my_book_live_firmware1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-35941HIGH | Western Digital wd_my_book_live_firmware Missing Authentication for Critical FunctionWestern Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an administrator API that can perform a system factory restore without authentication, as exploited in the wild in June 2021, a different vulnerability than CVE-2018-18472. | CVSS7.5v3.1 | EPSS12.7% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |