CVE-2022-22988
Published: Jan 13, 2022
Modified: Aug 3, 2024
CVSS v3.1
7.7
Description
File and directory permissions have been corrected to prevent unintended users from modifying or accessing resources. It would be more difficult for an authenticated attacker to now traverse through the files and directories. This can only be exploited once an attacker has already found a way to get authenticated access to the device.
| Vendor | Product | Versions |
|---|---|---|
Western Digital | EdgeRover | affected EdgeRover Mac Desktop App - < 1.5.0-576 |
Western Digital | EdgeRover | affected EdgeRover Windows Desktop App - < 1.5.0-576 |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now