1. Home
  2. CVE Database
  3. CVE-2022-22989
CRITICAL · 9.8

CVE-2022-22989

My Cloud OS 5 was vulnerable to a pre-authenticated stack overflow vulnerability on the FTP service that could be exploited by unauthenticated attackers on the network. Addressed the vulnerability by ...

Vulnerability Description

My Cloud OS 5 was vulnerable to a pre-authenticated stack overflow vulnerability on the FTP service that could be exploited by unauthenticated attackers on the network. Addressed the vulnerability by adding defenses against stack overflow issues.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
WesterndigitalMy Cloud Os< 5.19.117
WesterndigitalMy Cloud-
WesterndigitalMy Cloud Dl2100-
WesterndigitalMy Cloud Dl4100-
WesterndigitalMy Cloud Ex2 Ultra-
WesterndigitalMy Cloud Ex2100-
WesterndigitalMy Cloud Ex4100-
WesterndigitalMy Cloud Mirror Gen 2-
WesterndigitalMy Cloud Pr2100-
WesterndigitalMy Cloud Pr4100-
WesterndigitalWd Cloud-

Related Weaknesses (CWE)

CWE-121CWE-787

References

FAQ

What is CVE-2022-22989?

CVE-2022-22989 is a vulnerability with a CVSS score of 9.8 (CRITICAL). My Cloud OS 5 was vulnerable to a pre-authenticated stack overflow vulnerability on the FTP service that could be exploited by unauthenticated attackers on the network. Addressed the vulnerability by ...

How severe is CVE-2022-22989?

CVE-2022-22989 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2022-22989?

Check the references section above for vendor advisories and patch information. Affected products include: Westerndigital My Cloud Os, Westerndigital My Cloud, Westerndigital My Cloud Dl2100, Westerndigital My Cloud Dl4100, Westerndigital My Cloud Ex2 Ultra.