Westerndigital Wd Discovery vulnerabilities

3 vulnerabilities

Known vulnerabilities in Westerndigital Wd Discovery, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2020-15816westerndigitalwd_discovery
EPSS score
4.09%
In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could potentially execute code in the application's process through library injection by using DYLD environment variables.8.8CVE-2020-12427westerndigitalwd_discovery
EPSS score
0.45%
The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space.5.3CVE-2022-29835western digitalwd discovery+1
EPSS score
0.20%
WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereby impact the confidentiality of user content. This issue affects: Western Digital WD Discovery WD Discovery Desktop App versions prior to 4.4.396 on Mac; WD Discovery Desktop App versions prior to 4.4.396 on Windows.