Western Digital vendor intelligence
Western Digital Known Exploited Vulnerabilities
Track evidence-backed exploitation affecting Western Digital products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.
- Total KEVs
- 3
- Known exploited vulnerabilities affecting Western Digital products
- In CISA KEV
- 0
- Records also listed in the official catalog
- Beyond CISA KEV
- 3
- Additional exploited vulnerabilities absent from CISA KEV
- Sensor Observed
- 0
- Western Digital KEVs with sensor-observed exploitation activity
The catalog gap matters for Western Digital exposure
All three exploited Western Digital vulnerabilities tracked by Previdian are not in CISA KEV. Teams relying on the official catalog alone would miss 100% of this vendor portfolio.
- 0%
- Covered by CISA
- 100%
- Beyond CISA
- 3
- Product families
Attested Western Digital vulnerabilities
3 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.
How exploitation is verified| CVE / description | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2021-35941
Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an administrator API that can perform a system factory... |
WD My Book Live, WD My Book Live Duo | High | Beyond CISA | 29 Oct 2026 |
|
CVE-2016-10108
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified... |
MyCloud NAS | High | Beyond CISA | 05 Jul 2025 |
|
CVE-2017-17560
An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component,... |
MyCloud PR4100 | High | Beyond CISA | 12 Dec 2017 |
No Western Digital vulnerabilities match this search or filter.
Showing 3 of 3 on this page (3 Western Digital known exploited vulnerabilities).
Recurring weakness patterns
Authentication, missing authentication for critical function, and neutralization account for three mapped occurrences across this Western Digital KEV portfolio.