{"id":"CVE-2022-22995","state":"PUBLISHED","title":"Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk","description":"The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.","publishedAt":"2022-03-25T00:00:00.000Z","updatedAt":"2025-11-03T21:45:48.606Z","severity":{"score":10,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L","source":"WDC PSIRT"},"assigner":"WDC PSIRT","products":["Western Digital My Cloud","Western Digital My Cloud Home"],"affected":[{"vendor":"Western Digital","product":"My Cloud","versions":[{"version":"My Cloud OS 5","status":"affected","lessThan":" 5.19.117","versionType":"custom"}],"platforms":["Linux"]},{"vendor":"Western Digital","product":"My Cloud Home","versions":[{"version":"My Cloud Home","status":"affected","lessThan":" 7.16-220","versionType":"custom"}],"platforms":["Android "]}],"references":["https://www.westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5CZZLFOTUP3QYHGHSDUNENGSLPJ6KGO/","https://security.gentoo.org/glsa/202311-02","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/55ROUJI22SHZX5EM23QAILZHI67EZQKW/","https://lists.debian.org/debian-lts-announce/2024/01/msg00000.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00026.html"],"weaknesses":["CWE-59"],"ingestedAt":"2026-10-29T19:49:38.433Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/22xxx/CVE-2022-22995.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-22995","state":"PUBLISHED","datePublished":"2022-03-25T00:00:00.000Z","dateUpdated":"2025-11-03T21:45:48.606Z","assignerShortName":"WDC PSIRT","assignerOrgId":"cb3b742e-5145-4748-b44b-5ffd45bf3b6a","dateReserved":"2022-01-10T00:00:00.000Z"},"containers":{"cna":{"title":"Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk","descriptions":[{"lang":"en","value":"The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code."}],"affected":[{"vendor":"Western Digital","product":"My Cloud","versions":[{"version":"My Cloud OS 5","status":"affected","lessThan":" 5.19.117","versionType":"custom"}],"platforms":["Linux"]},{"vendor":"Western Digital","product":"My Cloud Home","versions":[{"version":"My Cloud Home","status":"affected","lessThan":" 7.16-220","versionType":"custom"}],"platforms":["Android "]}],"references":[{"url":"https://www.westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2/","name":"FEDORA-2023-cec97f7b5d","tags":["vendor-advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5CZZLFOTUP3QYHGHSDUNENGSLPJ6KGO/","name":"FEDORA-2023-ef901c862c","tags":["vendor-advisory"]},{"url":"https://security.gentoo.org/glsa/202311-02","name":"GLSA-202311-02","tags":["vendor-advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/55ROUJI22SHZX5EM23QAILZHI67EZQKW/","name":"FEDORA-2023-39f0ec3879","tags":["vendor-advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00000.html","name":"[debian-lts-announce] 20240104 [SECURITY] [DLA 3706-1] netatalk security update","tags":["mailing-list"]}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW","baseScore":10,"baseSeverity":"CRITICAL"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-59","type":"CWE","lang":"en","description":"CWE-59 Improper Link Resolution Before File Access ('Link Following')"}]}],"providerMetadata":{"shortName":"WDC PSIRT","orgId":"cb3b742e-5145-4748-b44b-5ffd45bf3b6a","dateUpdated":"2024-01-04T22:06:13.592Z"},"credits":[{"lang":"en","value":"Corentin BAYET (@OnlyTheDuck), Etienne HELLUY-LAFONT and Luca MORO (@johncool__) from Synacktiv working with Trend Micro’s Zero Day Initiative"}],"x_generator":{"engine":"Vulnogram 0.0.9"},"source":{"discovery":"EXTERNAL"},"solutions":[{"lang":"en","value":"To take advantage of the latest security fixes, Western Digital recommends that users promptly update their devices to the latest firmware by clicking on the firmware update notification."}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2/","name":"FEDORA-2023-cec97f7b5d","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5CZZLFOTUP3QYHGHSDUNENGSLPJ6KGO/","name":"FEDORA-2023-ef901c862c","tags":["vendor-advisory","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202311-02","name":"GLSA-202311-02","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/55ROUJI22SHZX5EM23QAILZHI67EZQKW/","name":"FEDORA-2023-39f0ec3879","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00000.html","name":"[debian-lts-announce] 20240104 [SECURITY] [DLA 3706-1] netatalk security update","tags":["mailing-list","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00026.html"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T21:45:48.606Z"}}]}}}