Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

western_digital / my_cloud_ex2_ultra CVEs

Beta · best-effort

5 CVEs tagged to western_digital / my_cloud_ex2_ultra — 2 Critical, 3 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to western_digital vendor archive

CVE-2019-18931

Published Nov 13, 2019

Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2019-18930

Published Nov 13, 2019

Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a stack-based buffer overflow. There is no s…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2019-18929

Published Nov 13, 2019

Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mgr.cgi stack-based buffer overf…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2019-9951

Published Apr 24, 2019

Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmwar…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2018-17153

Published Sep 18, 2018

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vuln…

CVSS 9.8 · Critical

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1