ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-29844

—
CVSS 3.1
9.8 critical
EPSS
36%p98
Published
()
Modified
Description

A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to read and write arbitrary files. This could lead to a full NAS compromise and would give remote execution capabilities to the attacker.

Vendors
westerndigital
Products
my cloud pr2100 firmware, my cloud pr4100 firmware, my cloud ex4100 firmware, my cloud ex2 ultra firmware, my cloud mirror g2 firmware, my cloud dl2100 firmware, my cloud dl4100 firmware, my cloud ex2100 firmware
Weakness
CWE-23, CWE-22
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (36.4%)

In the news

No ingested article mentions this CVE yet.