« Volver al listado

Westerndigital

Westerndigital WD Discovery: vulnerabilidades y CVE

Westerndigital WD Discovery tiene 5 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.

CVE5
Últimos 12 meses1
Críticas0
Explotadas activamente0

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2025-30248Alta (8.9)0.61%—26 ene 2026
DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary code via placement of a crafted dll in the installer's search path.
CVE-2024-22169Alta (7.1)0.26%—2 ago 2024
WD Discovery versions prior to 5.0.589 contain a misconfiguration in the Node.js environment settings that could allow code execution by utilizing the 'ELECTRON_RUN_AS_NODE' environment variable. Any malicious…
CVE-2022-29835Media (5.3)0.19%—19 sept 2022
WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not…
CVE-2020-15816Alta (8.8)4.1%—17 jul 2020
In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could potentially execute code in the application's process through library injection by using DYLD…
CVE-2020-12427Alta (8.8)0.45%—13 may 2020
The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space.

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1203 Exploitation for Client Execution1
  2. T1574.007 Path Interception by PATH Environment Variable1

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.

Otros productos de Westerndigital