CVE-2022-23000

🗓️ 25 Jul 2022 18:46:02Reported by WDC PSIRTType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 67 Views

Weak SSLContext in Western Digital My Cloud Web Ap

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-23000	25 Jul 202219:15	–	attackerkb
BDU FSTEC	The vulnerability in the implementation of the SSLContext class in My Cloud OS operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	18 Aug 202200:00	–	bdu_fstec
Circl	CVE-2022-23000	25 Jul 202222:33	–	circl
CNNVD	Western Digital My Cloud 安全漏洞	25 Jul 202200:00	–	cnnvd
Cvelist	CVE-2022-23000 Weak Default SSL use in Port Forwarding Service	25 Jul 202218:46	–	cvelist
EUVD	EUVD-2022-28111	3 Oct 202520:07	–	euvd
NVD	CVE-2022-23000	25 Jul 202219:15	–	nvd
OpenVAS	Western Digital My Cloud Multiple Products 5.0 < 5.23.114 Multiple Vulnerabilities (WDC-22011)	25 Jul 202200:00	–	openvas
OSV	CVE-2022-23000	25 Jul 202219:15	–	osv
Prion	Input validation	25 Jul 202219:15	–	prion

NVD

Node

westerndigital my_cloud_pr2100_firmwareRange<5.23.114

AND

westerndigital my_cloud_pr2100Match-

Node

westerndigital my_cloud_pr4100_firmwareRange<5.23.114

AND

westerndigital my_cloud_pr4100Match-

Node

westerndigital my_cloud_ex4100_firmwareRange<5.23.114

AND

westerndigital my_cloud_ex4100Match-

Node

westerndigital my_cloud_ex2_ultra_firmwareRange<5.23.114

AND

westerndigital my_cloud_ex2_ultraMatch-

Node

westerndigital my_cloud_mirror_g2_firmwareRange<5.23.114

AND

westerndigital my_cloud_mirror_g2Match-

Node

westerndigital my_cloud_dl2100_firmwareRange<5.23.114

AND

westerndigital my_cloud_dl2100Match-

Node

westerndigital my_cloud_dl4100_firmwareRange<5.23.114

AND

westerndigital my_cloud_dl4100Match-

Node

westerndigital my_cloud_ex2100_firmwareRange<5.23.114

AND

westerndigital my_cloud_ex2100Match-

Node

westerndigital my_cloud_firmwareRange<5.23.114

AND

westerndigital my_cloudMatch-

[
  {
    "platforms": [
      "Linux"
    ],
    "product": "My Cloud",
    "vendor": "Western Digital",
    "versions": [
      {
        "lessThan": "5.23.114",
        "status": "affected",
        "version": "My Cloud OS 5",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
westerndigital	www.westerndigital.com/support/product-security/wdc-22011-my-cloud-firmware-version-5-23-114

17 Jun 2026 04:29Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.3 - 7.8

EPSS0.00183

CWE-757