Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-02-05	CVE-2023-22817	Server-Side Request Forgery (SSRF) vulnerability in Westerndigital products Server-side request forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL using another DNS address to point back to the loopback adapter. local low complexity westerndigital CWE-918	5.5
2024-02-05	CVE-2023-22819	Resource Exhaustion vulnerability in Westerndigital products An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being stopped and restarted was discovered in Western Digital My Cloud Home, My Cloud Home Duo, SanDisk ibi and Western Digital My Cloud OS 5 devices. network low complexity westerndigital CWE-400	4.9