Westerndigital My Cloud Glacier Firmware vulnerabilities

2 CVEs affecting Westerndigital My Cloud Glacier Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-22819, published 2024-02-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-22819, published 2024-02-05. Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days. An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being…
CVE-2023-22817, published 2024-02-05. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Server-side request forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL using another DNS address to point back to the loopback adapter. This could…