Back to search
CVE-2022-22995
Published: Mar 25, 2022
Modified: Nov 3, 2025
PUBLISHED
CVSS v3.1
10.0
CRITICAL
Description
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
| Vendor | Product | Versions |
|---|---|---|
Western Digital | My Cloud | affected My Cloud OS 5 - < 5.19.117 |
Western Digital | My Cloud Home | affected My Cloud Home - < 7.16-220 |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
Low
References
FEDORA-2023-cec97f7b5d
vendor-advisory
FEDORA-2023-ef901c862c
vendor-advisory
GLSA-202311-02
vendor-advisory
FEDORA-2023-39f0ec3879
vendor-advisory
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now