My Cloud
Vendor:
First CVE: Oct 9, 2018 · Active for 7 years
4
Total CVEs
More Total CVEs than 75% of tracked products
1.0
Avg CVEs / Year
Bottom 1%
6.8
Avg CVSS
Higher Avg CVSS than 42% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact My Cloud over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 9, 2018
7 years ago
Most Recent CVE
Sep 29, 2025
302 days ago
CVE Severity & Scoring
My Cloud4 CVEs
50%
50%
All CVEs353,173 CVEs
45%
40%
11%
MediumCritical
Attack Vector
Local0 (0.0%)
Network3 (75.0%)
Unknown0 (0.0%)
Physical1 (25.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (75.0%)
High1 (25.0%)
Unknown0 (0.0%)
User Interaction
None3 (75.0%)
Unknown0 (0.0%)
Required1 (25.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None4 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-30247CRITICAL An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system | Sep 29, 2025 | 9.3 | 34 | NO | NO |
CVE-2024-22170CRITICAL Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Western Digital My Cloud ddns-start on Linux allows Overflow Buffers.This issue affects My | Sep 27, 2024 | 9.2 | 29 | NO | NO |
CVE-2018-7928MEDIUM There is a security vulnerability which could lead to Factory Reset Protection (FRP) bypass in the MyCloud APP with the versions before 8.1.2.303 installed on some Huawei smart pho | Oct 9, 2018 | 4.6 | 18 | NO | NO |
CVE-2023-22813MEDIUM
A device API
endpoint was missing access controls on Western Digital My Cloud OS 5 iOS and Anroid Mobile Apps, My Cloud Home iOS and Android Mobile Apps, SanDisk ibi iOS | May 8, 2023 | 4.3 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (4 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (4 CVEs).
Media Mentions
Signals from CVEs in this product scope (4 CVEs).
Top CNAs Publishing CVEs For My Cloud
Top CWEs
Versions
No cataloged versions.