Westerndigital

Western Digital's vulnerability profile centers on a moderate but widely deployed portfolio of network-attached storage (NAS) systems, particularly its My Cloud line of products spanning both small-business and enterprise tiers. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes and recur through weakness classes including OS command injection, improper authentication, path traversal, and insufficiently protected credentials—exposures that are characteristic of appliances combining web interfaces, remote-access capabilities, and local storage management. The concentration of these flaws across flagship products such as the My Cloud PR and EX series reflects the authentication and input-validation demands of internet-facing storage devices that often sit behind a security perimeter but remain targets for lateral movement and credential compromise. Defenders should prioritize inventory and patching of affected NAS appliances, particularly those exposed to untrusted networks, and monitor for authentication bypass and command-injection exploits in this device class. Live severity, exploitation activity, and exposure counts are shown alongside this summary.