Fiche vulnérabilité
CVE-2022-36330 : faille élevée westerndigital my cloud home duo… (CVSS 8.1)
Description
A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices. An attacker would require exploitation of another vulnerability to raise their privileges in order to exploit this buffer overflow vulnerability. This issue affects My Cloud Home and My Cloud Home Duo: before 9.4.0-191; ibi: before 9.4.0-191.
En bref
- Sévérité
- Élevée (CVSS 8.1)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 10 mai 2023
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- westerndigital my cloud home duo firmware
- westerndigital sandisk ibi firmware
- westerndigital my cloud home firmware