Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2022-29837

Path traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WDC PSIRT

Description

A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which could allow an attacker to initiate installation of custom ZIP packages and overwrite system files. This could potentially lead to a code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Western Digital My Cloud Home

  • My Cloud Home to < 8.12.0-178affected
  • My Cloud Home Duo to < 8.12.0-178affected

SanDisk ibi

  • ibi to < 8.12.0-178affected

References