Arbitrary file upload in Western Digital products - CVE-2022-22995

Vulnerability identifier: #VU61623

CSH Severity: High

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

CVE-ID: CVE-2022-22995

CWE-ID: CWE-434

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
My Cloud PR2100
My Cloud PR4100
My Cloud EX4100
My Cloud EX2 Ultra
My Cloud Mirror Gen 2
My Cloud DL2100
My Cloud DL4100
My Cloud EX2100
WD Cloud
My Cloud
My Cloud Home
My Cloud OS 5

Software vendor:
Western Digital

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to insufficient validation of file during file upload within the combination of primitives offered by SMB and AFP in their default configuration. A remote attacker can upload a malicious file and execute it on the server.

Install updates from vendor's website.

• https://www.westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities