Unrated severityNVD Advisory· Published Feb 6, 2023· Updated Mar 26, 2025

CVE-2021-36225

Description

Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API commands for firmware uploads and installation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Western Digital/My Clouddescription
Westerndigital/Wd My Cloudllm-fuzzy
Range: < OS5

Patches

Vulnerability mechanics

References

github.com/pedrib/PoC/blob/master/advisories/Pwn2Own/Tokyo_2020/weekend_destroyer/weekend_destroyer.mdmitre
krebsonsecurity.com/2021/07/another-0-day-looms-for-many-western-digital-users/mitre
www.youtube.com/watchmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000