Digital Vulnérabilités

Chronologie

Taper

Produit

Western Digital My Cloud OS22
Western Digital My Cloud20
Western Digital My Cloud Home11
Western Digital My Cloud Home Duo10
Digital Unix10

Contre-mesures

Official Fix128
Temporary Fix0
Workaround7
Unavailable1
Not Defined86

Exploitabilité

High5
Functional0
Proof-of-Concept17
Unproven0
Not Defined200

Vecteur d'accès

Not Defined0
Physical2
Local38
Adjacent28
Network154

Authentification

Not Defined0
High14
Low65
None143

Interaction de l'utilisateur

Not Defined0
Required64
None158

C3BM Index

CVSSv3 Base

≤10
≤20
≤32
≤412
≤520
≤671
≤732
≤844
≤926
≤1015

CVSSv3 Temp

≤10
≤20
≤32
≤412
≤525
≤670
≤740
≤839
≤923
≤1011

VulDB

≤10
≤20
≤37
≤423
≤558
≤636
≤736
≤838
≤98
≤1016

NVD

≤10
≤20
≤30
≤40
≤510
≤612
≤746
≤816
≤916
≤1034

CNA

≤10
≤23
≤30
≤41
≤510
≤615
≤79
≤821
≤94
≤107

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k30
<2k129
<5k62
<10k0
<25k0
<50k1
<100k0
≥100k0

Exploiter aujourd'hui

<1k208
<2k11
<5k3
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (149): Advanced Contact form 7 DB Plugin (1), All In One Redirection Plugin (1), Amazon S3 Extension (1), App Management Publisher Plugin (2), Arkeia (1), ArmorLock App (1), Atom CMS (3), Attach Accounts to Orders Extension (1), Battlefield 1942 (1), Bulk NoIndex & NoFollow Toolkit Plugin (1), CF7 Invisible reCAPTCHA Plugin (1), CIMPLICITY (2), CSV Manager Extension (1), Canal Structural Wind Analysis (1), Category Post List Widget Plugin (1), Cente IPv6 (3), Cente IPv6 SNMPv2 (3), Cente IPv6 SNMPv3 (3), Cente TCP-IPv4 (1), Com Jcalpro (1), CommentLuv Plugin (1), Commissions Extension (1), Conditional Success Redirects Extension (1), Content Restriction Extension (1), Core (1), Cross-sell Upsell Extension (1), DASDEC (2), DCFW-1800-SDC (1), DL2100 (1), DL4100 (1), DP Calendar Component (1), DW MEGApix IP Camera (6), DW Spectrum Server (1), DWU850-GS (1), Dashboard (1), Decon WP SMS Plugin (1), DigitalHive (1), Digital Store Theme (1), Duplicate Theme Plugin (1), E-Commerce Software (3), EX2 Ultra (1), EX2100 (1), EX4100 (1), EdgeRover (1), EdgeRover Desktop App (1), Favorites Extension (1), Free Downloads Extension (1), G-RAID (1), Game Engine (1), HMI-SCADA iFIX (2), HREFLANG Tags Lite Plugin (1), IPv4 SNMPv2 (1), IPv4 SNMPv3 (1), Invoices Extension (1), Lattice Theme (1), Management Console (4), Manual Purchases Extension (1), Media Server (1), Mirror Gen2 (1), My Cloud (20), My Cloud Cloud (1), My Cloud DL2100 (2), My Cloud DL4100 (2), My Cloud EX2 Ultra (5), My Cloud EX2100 (2), My Cloud EX4100 (2), My Cloud Home (11), My Cloud Home & Duo (2), My Cloud Home Duo (10), My Cloud Home Mobile App (1), My Cloud Mirror Gen2 (2), My Cloud NAS (3), MyCloud NAS (2), My Cloud OS (22), My Cloud PR2100 (2), My Cloud PR4100 (2), MyCloud PR4100 (1), My Cloud Web App (1), NZ Ecommerce (2), OSF 1 (2), OpenVMS (1), Osf 1 (1), PDF Invoices Extension (1), PDF Stamper Extension (1), PR2100 (1), PR4100 (1), Penguin Aurora Box 41502 (1), Penguin Aurora TV Box 41502 (1), Per Product Emails Extension (1), Pop3 Server (1), PopPhoto (1), Proficy Historian (7), Pushover Notifications Extension (1), QR Code Extension (1), Quota Theme (1), RAS Collection Instrument (1), RN510 (3), Recommended Products extension (1), Recount Earnings Extension (1), Recurring Payments Extension (1), RtspVapgDecoder.dll (1), SSD Dashboard (2), SalesKing Plugin (2), SanDisk SSD Dashboard (2), SanDisk Security Installer (1), SanDisk X300 (2), SanDisk X300s (2), SanDisk X400 (2), SanDisk X600 (3), SanDisk ibi (8), Secure Linux (1), Sell Digital Files Plugin (1), Service (1), Shoppette Theme (1), Simple Shipping Extension (1), Software Licensing Extension (1), Stripe Extension (1), Suite (1), Sweet B Cryptographic Library (4), Syrus4 IoT Telematics Gateway (1), TV Live Hub (1), TV Media Player (1), TriPay Payment Gateway Plugin (1), Twenty-Twelve Theme (1), Ultrix (4), Unix (10), Upload File Extension (1), VMS (2), WD Cloud (1), WD Discovery (1), WD Discovery Application (1), WD Discovery Desktop App (1), WD My Book Live (2), WD My Book Live Duo (1), WD My Book World (1), WD My Cloud (3), WD My Cloud Mirror (2), WesternDigitalSSDDashboardSetup.exe (1), Wish Lists Extension (1), Zope (1), e-Gov Client Application (1), eSellerate SDK (1), htaccess Editor Extension (1), iFIX (1), iNAND (1), ibi (1), m-FILTER (1), mycloud.com (1), sh404SEF (2)

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
15/04/20245.35.3DMG MORI Digital Cente IPv6/Cente IPv6 SNMPv2/Cente IPv6 SNMPv3 IPv6 NDP Packet divulgation de l'informationInconnueNot DefinedNot Defined0.000430.05CVE-2024-23911
15/04/20247.57.2DMG MORI Digital Cente IPv6/Cente IPv6 SNMPv2/Cente IPv6 SNMPv3 IPv6 Header divulgation de l'informationInconnueNot DefinedNot Defined0.000430.08CVE-2024-28894
15/04/20243.73.7DMG MORI Digital Cente IPv6 SNMPv3 chiffrement faibleInconnueNot DefinedNot Defined0.000450.00CVE-2024-28957
29/03/20245.75.6Vsourz Digital All In One Redirection Plugin cross site scriptingWordPress PluginNot DefinedNot Defined0.000430.05CVE-2024-30506
27/03/20245.75.6Mad Fish Digital Bulk NoIndex & NoFollow Toolkit Plugin cross site scriptingWordPress PluginNot DefinedNot Defined0.000430.00CVE-2024-29791
26/03/20246.96.8SNP Digital SalesKing Plugin elévation de privilègesWordPress PluginNot DefinedNot Defined0.000430.05CVE-2024-22156
15/02/20243.53.5digital-peak DP Calendar Component cross site scriptingCalendar SoftwareNot DefinedNot Defined0.000430.02CVE-2024-21727
06/02/20245.45.3Western Digital My Cloud OS/My Cloud Home & Duo elévation de privilègesCloud SoftwareNot DefinedOfficial Fix0.000460.03CVE-2023-22817
06/02/20244.94.8Western Digital My Cloud OS/My Cloud Home & Duo dénie de serviceCloud SoftwareNot DefinedOfficial Fix0.000630.02CVE-2023-22819
01/02/20245.15.1Easy Digital Downloads Sell Digital Files Plugin cross site scriptingWordPress PluginNot DefinedNot Defined0.000450.02CVE-2023-51684
24/01/20246.46.3SNP Digital SalesKing Plugin divulgation de l'informationWordPress PluginNot DefinedNot Defined0.000870.02CVE-2024-22154
17/01/20247.67.5Vagary Digital HREFLANG Tags Lite Plugin elévation de privilègesWordPress PluginNot DefinedNot Defined0.000910.02CVE-2022-36418
15/12/20237.37.3Elegant Digital Solutions CommentLuv Plugin elévation de privilègesWordPress PluginNot DefinedNot Defined0.000870.02CVE-2023-49159
30/11/20234.44.4PT Trijaya Digital Grup TriPay Payment Gateway Plugin cross site scriptingWordPress PluginNot DefinedNot Defined0.000450.07CVE-2023-48737
22/11/20239.99.9Digital Communications Technologies Syrus4 IoT Telematics Gateway MQTT Server authentification faibleInconnueNot DefinedNot Defined0.001790.04CVE-2023-6248
16/11/20237.57.4Western Digital SanDisk Security Installer elévation de privilègesInconnueNot DefinedOfficial Fix0.000550.03CVE-2023-22818
13/11/20236.26.1Vsourz Digital CF7 Invisible reCAPTCHA Plugin cross site request forgeryWordPress PluginNot DefinedNot Defined0.000580.02CVE-2023-28167
13/11/20235.85.8Stark Digital Category Post List Widget Plugin cross site request forgeryWordPress PluginNot DefinedNot Defined0.000460.00CVE-2023-47516
25/10/20235.85.8Muller Digital Duplicate Theme Plugin cross site request forgeryWordPress PluginNot DefinedNot Defined0.000580.00CVE-2023-46204
11/10/20234.94.8Digital Agency e-Gov Client Application URL elévation de privilègesInconnueNot DefinedOfficial Fix0.000460.00CVE-2023-44689
05/10/20235.55.3Digital China Networks DCFW-1800-SDC cloudadmin.sh wget elévation de privilègesInconnueNot DefinedNot Defined0.000550.00CVE-2023-43321
31/08/20237.87.6GE Digital CIMPLICITY Configuration File Local Privilege EscalationInconnueNot DefinedOfficial Fix0.000420.02CVE-2023-4487
08/08/20235.25.1Digital Ant E-Commerce Software cross site scriptingE-Commerce Management SoftwareNot DefinedOfficial Fix0.000450.00CVE-2023-3653
08/08/20235.25.1Digital An E-Commerce Software cross site scriptingE-Commerce Management SoftwareNot DefinedOfficial Fix0.000460.00CVE-2023-3652
08/08/20238.58.4Digital Ant E-Commerce Software sql injectionE-Commerce Management SoftwareNot DefinedOfficial Fix0.000760.00CVE-2023-3651

197 plus d'entrées ne sont pas affichées

Interested in the pricing of exploits?

See the underground prices here!