Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-22993

Limited Server-Side Request Forgery vulnerability on Western Digital My Cloud devices.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WDC PSIRT

Description

A limited SSRF vulnerability was discovered on Western Digital My Cloud devices that could allow an attacker to impersonate a server and reach any page on the server by bypassing access controls. The vulnerability was addressed by creating a whitelist for valid parameters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Western Digital My Cloud

  • My Cloud OS 5 to < 5.19.117affected

References