CVE-2022-23006

🗓️ 27 Sep 2022 13:53:29Reported by WDC PSIRTType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 51 Views

CVE-2022-23006: Western Digital My Cloud Home, SanDisk ibi Stack-based Buffer Overflo

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-23006	28 Sep 202202:36	–	circl
CNNVD	Western Digital My Cloud和SanDisk ibi缓冲区错误漏洞	27 Sep 202200:00	–	cnnvd
CNVD	Buffer Overflow Vulnerability in Multiple Western Digital Products	29 Sep 202200:00	–	cnvd
Cvelist	CVE-2022-23006 Buffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi	27 Sep 202213:53	–	cvelist
EUVD	EUVD-2022-28117	3 Oct 202520:07	–	euvd
NVD	CVE-2022-23006	27 Sep 202223:15	–	nvd
OSV	CVE-2022-23006	27 Sep 202223:15	–	osv
Prion	Stack overflow	27 Sep 202223:15	–	prion
Positive Technologies	PT-2022-15774 · Sandisk +1 · Sandisk Ibi +1	27 Sep 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-23006	9 Jan 202610:54	–	redhatcve

NVD

Node

westerndigital my_cloud_home_firmwareRange<8.10.0-117

AND

westerndigital my_cloud_homeMatch-

Node

westerndigital my_cloud_home_duo_firmwareRange<8.10.0-117

AND

westerndigital my_cloud_home_duoMatch-

Node

westerndigital sandisk_ibi_firmwareRange<8.10.0-117

AND

westerndigital sandisk_ibiMatch-

[
  {
    "platforms": [
      "Linux"
    ],
    "product": "My Cloud Home",
    "vendor": "Western Digital",
    "versions": [
      {
        "lessThan": "8.10.0-117",
        "status": "affected",
        "version": "8.10.0-117",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "Linux"
    ],
    "product": "My Cloud Home Duo",
    "vendor": "Western Digital",
    "versions": [
      {
        "lessThan": "8.10.0-117",
        "status": "affected",
        "version": "8.10.0-117",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "Linux"
    ],
    "product": "ibi",
    "vendor": "SanDisk",
    "versions": [
      {
        "lessThan": "8.10.0-117",
        "status": "affected",
        "version": "8.10.0-117",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23006
westerndigital	www.westerndigital.com/support/product-security/wdc-22015-western-digital-my-cloud-home-and-sandisk-ibi-firmware-version-8-10-0-117

21 Nov 2024 06:47Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.11.8 - 6.7

EPSS0.00054

SSVC