← All advisories

Critical severity9.8NVD Advisory· Published Feb 6, 2023· Updated Jun 17, 2026

CVE-2021-36224

CVE-2021-36224

Description

Western Digital My Cloud devices before OS5 have a nobody account with a blank password.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Westerndigital/My Cloud OS
cpe:2.3:o:westerndigital:my_cloud_os:*:*:*:*:*:*:*:*
Range: <5.02.104
Western Digital/My Clouddescription
Westerndigital/Wd My Cloudllm-fuzzy
Range: < OS5

Patches

Vulnerability mechanics

References

3

github.com/pedrib/PoC/blob/master/advisories/Pwn2Own/Tokyo_2020/weekend_destroyer/weekend_destroyer.mdnvdExploitPatchThird Party Advisory
krebsonsecurity.com/2021/07/another-0-day-looms-for-many-western-digital-users/nvdExploitThird Party Advisory
www.youtube.com/watchnvdExploitPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.