← Database

CVE-2021-36225

HIGH CVSS: 8.8 Published: 2023-02-06 Modified: 2026-06-17

Description

Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API commands for firmware uploads and installation.

Affected Platforms

Westerndigital My Cloud OsWesterndigital My Cloud Pr4100

Weakness Type

CWE-862, CWE-862

References