MY Cloud Mirror GEN 2 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2019-04-24	CVE-2019-9951	Unrestricted Upload of File with Dangerous Type vulnerability in Western Digital products Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is affected by an unauthenticated file upload vulnerability. network low complexity western-digital CWE-434 critical	9.8
2018-09-18	CVE-2018-17153	Improper Authentication vulnerability in Western Digital products It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. network low complexity western-digital CWE-287 critical	9.8