Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-22989

Pre-authenticated stack overflow vulnerability on FTP Service

Description

My Cloud OS 5 was vulnerable to a pre-authenticated stack overflow vulnerability on the FTP service that could be exploited by unauthenticated attackers on the network. Addressed the vulnerability by adding defenses against stack overflow issues.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Western Digital My Cloud

Default version status: unaffected

  • My Cloud OS 5 to < 5.19.117affected

References