CVE-2022-29842: falha crítica em Western Digital My Cloud OS 5
Command Injection Vulnerability in Western Digital My Cloud devices
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 1.8%
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability that could allow an attacker to execute code in the context of the root user on a vulnerable CGI file was discovered in Western Digital My Cloud OS 5 devicesThis issue affects My Cloud OS 5: before 5.26.119.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Western Digital · My Cloud OS 5CVEs relacionadas — Western Digital My Cloud OS 5
No mesmo produto, das mais perigosas para as menos.
CVE-2022-36327MEDIUMPath traversal vulnerability leading to an arbitrary file write in Western Digital devicesEPSS 1.5%CVE-2022-29841HIGHOS Command Injection vulnerability in Western Digital My Cloud devicesEPSS 1.4%CVE-2023-22815MEDIUMPost-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devicesEPSS 1.3%CVE-2023-22816MEDIUMLimited Post-Authentication Remote Command Injection in My Cloud ProductsEPSS 0.9%CVE-2023-22819MEDIUMUncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi productsEPSS 0.8%CVE-2022-36328MEDIUMPath Traversal Vulnerability leading to an arbitrary file read in Western Digital devicesEPSS 0.8%