CVE-2022-22995

🗓️ 25 Mar 2022 00:00:00Reported by WDC PSIRTType

The combination of primitives in default SMB and AFP configuration allows arbitrary file writing, leading to arbitrary code execution

Reporter	Title	Published	Views	Family All 59
AlpineLinux	CVE-2022-22995	25 Mar 202200:00	–	alpinelinux
CNNVD	Western Digital My Cloud 后置链接漏洞	25 Mar 202200:00	–	cnnvd
Cvelist	CVE-2022-22995 Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk	25 Mar 202200:00	–	cvelist
Debian	[SECURITY] [DLA 3706-1] netatalk security update	4 Jan 202421:10	–	debian
Debian	[SECURITY] [DLA 3968-1] netatalk security update	27 Nov 202423:46	–	debian
Debian CVE	CVE-2022-22995	25 Mar 202200:00	–	debiancve
Tenable Nessus	Debian dla-3706 : netatalk - security update	22 Jan 202500:00	–	nessus
Tenable Nessus	Debian dla-3968 : netatalk - security update	27 Nov 202400:00	–	nessus
Tenable Nessus	Fedora 39 : netatalk (2023-39f0ec3879)	7 Nov 202300:00	–	nessus
Tenable Nessus	Fedora 38 : netatalk (2023-cec97f7b5d)	13 Oct 202300:00	–	nessus

NVD

Node

westerndigital my_cloud_pr2100_firmwareRange<5.19.117

AND

westerndigital my_cloud_pr2100Match-

Node

westerndigital my_cloud_pr4100_firmwareRange<5.19.117

AND

westerndigital my_cloud_pr4100Match-

Node

westerndigital my_cloud_ex4100_firmwareRange<5.19.117

AND

westerndigital my_cloud_ex4100Match-

Node

westerndigital my_cloud_ex2_ultra_firmwareRange<5.19.117

AND

westerndigital my_cloud_ex2_ultraMatch-

Node

westerndigital my_cloud_mirror_gen_2_firmwareRange<5.19.117

AND

westerndigital my_cloud_mirror_gen_2Match-

Node

westerndigital my_cloud_dl2100_firmwareRange<5.19.117

AND

westerndigital my_cloud_dl2100Match-

Node

westerndigital my_cloud_dl4100_firmwareRange<5.19.117

AND

westerndigital my_cloud_dl4100Match-

Node

westerndigital my_cloud_ex2100_firmwareRange<5.19.117

AND

westerndigital my_cloud_ex2100Match-

Node

westerndigital my_cloud_firmwareRange<5.19.117

AND

westerndigital my_cloudMatch-

Node

westerndigital wd_cloud_firmwareRange<5.19.117

AND

westerndigital wd_cloudMatch-

Node

westerndigital my_cloud_home_firmwareRange<7.16-220

AND

westerndigital my_cloud_homeMatch-

Node

netatalk netatalkRange<3.1.18

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

fedoraproject fedoraMatch39

[
  {
    "vendor": "Western Digital",
    "product": "My Cloud",
    "versions": [
      {
        "version": "My Cloud OS 5",
        "status": "affected",
        "lessThan": " 5.19.117",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "Linux"
    ]
  },
  {
    "vendor": "Western Digital",
    "product": "My Cloud Home",
    "versions": [
      {
        "version": "My Cloud Home",
        "status": "affected",
        "lessThan": " 7.16-220",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "Android "
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2/
security	www.security.gentoo.org/glsa/202311-02
lists	www.lists.debian.org/debian-lts-announce/2024/01/msg00000.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/55ROUJI22SHZX5EM23QAILZHI67EZQKW/
westerndigital	www.westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5CZZLFOTUP3QYHGHSDUNENGSLPJ6KGO/
lists	www.lists.debian.org/debian-lts-announce/2024/11/msg00026.html

03 Nov 2025 22:15Current

9.7High risk

Vulners AI Score9.7

CVSS 27.5

CVSS 3.19.8 - 10

EPSS0.00162

CWE-59