Vulnerabilities > Westerndigital > MY Cloud > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-05-08 CVE-2023-22813 Missing Authorization vulnerability in Westerndigital products
A device API endpoint was missing access controls on Western Digital My Cloud OS 5 iOS and Anroid Mobile Apps, My Cloud Home iOS and Android Mobile Apps, SanDisk ibi iOS and Android Mobile Apps, My Cloud OS 5 Web App, My Cloud Home Web App and the SanDisk ibi Web App.
network
low complexity
westerndigital CWE-862
4.3
2018-10-09 CVE-2018-7928 Unspecified vulnerability in Westerndigital MY Cloud
There is a security vulnerability which could lead to Factory Reset Protection (FRP) bypass in the MyCloud APP with the versions before 8.1.2.303 installed on some Huawei smart phones.
low complexity
westerndigital
4.6