Western Digital My Cloud Ex2 Ultra Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Western Digital My Cloud Ex2 Ultra Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2018-17153 — CVSS 9.8 (critical): It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An…
• CVE-2019-9951 — CVSS 9.8 (critical): Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My…
• CVE-2019-18929 — CVSS 8.8 (high): Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a…
• CVE-2019-18930 — CVSS 8.8 (high): Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a…
• CVE-2019-18931 — CVSS 8.8 (high): Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted…