Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2022-29844

Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WDC PSIRT

Description

A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to read and write arbitrary files. This could lead to a full NAS compromise and would give remote execution capabilities to the attacker.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Western Digital My Cloud

  • My Cloud OS 5 to < 5.26.119affected

References