Westerndigital My Cloud Home vulnerabilities

2 CVEs affecting Westerndigital My Cloud Home, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-22813, published 2023-05-08.

More from Westerndigital.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-10951, published 2020-04-15. Medium severity, CVSS 4.7. EPSS: 0.9% chance of exploitation in the next 30 days. Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages.
• CVE-2023-22813, published 2023-05-08. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. A device API endpoint was missing access controls on Western Digital My Cloud OS 5 iOS and Anroid Mobile Apps, My Cloud Home iOS and Android Mobile Apps, SanDisk ibi iOS and Android Mobile…