My Cloud — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in My Cloud, with AI-generated Chinese analysis, references, and POCs.

Vendor: Western Digital

CVE ID	Title	CVSS	Severity	Paused
CVE-2025-30247	Western Digital My Cloud 安全漏洞 CWE-78	9.8^AI	Critical^AI	2025-09-29
CVE-2024-22170	Unchecked buffer in Dynamic DNS client CWE-119	9.8^AI	Critical^AI	2024-09-27
CVE-2022-29843	Western Digital My Cloud OS 5 devices Command Injection Vulnerability CWE-78	6.2	Medium	2023-01-25
CVE-2022-29844	Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp CWE-23	6.7	Medium	2023-01-25
CVE-2022-29838	Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices CWE-287	4.3	Medium	2022-12-09
CVE-2022-29839	Remote Backups Application Discloses Stored Credentials CWE-522	4.1	Medium	2022-12-09
CVE-2022-22999	Cross-site Scripting Vulnerability in USB Backups App CWE-79	8.2	High	2022-07-25
CVE-2022-23000	Weak Default SSL use in Port Forwarding Service CWE-757	7.3	High	2022-07-25
CVE-2022-22995	Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk CWE-59	10.0	Critical	2022-03-25
CVE-2022-22994	Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices. CWE-345	8.8	High	2022-01-28
CVE-2022-22993	Limited Server-Side Request Forgery vulnerability on Western Digital My Cloud devices. CWE-918	7.8	High	2022-01-28
CVE-2022-22990	Limited authentication bypass vulnerability on Western Digital My Cloud devices CWE-287	7.8	High	2022-01-13
CVE-2022-22991	Command injection through unsecured HTTP calls on Western Digital My Cloud devices CWE-78	7.8	High	2022-01-13
CVE-2022-22989	Pre-authenticated stack overflow vulnerability on FTP Service CWE-121	9.8	Critical	2022-01-13

All 14 known CVE vulnerabilities affecting My Cloud with full Chinese analysis, references, and POCs where available.