CVE-2022-29842

🗓️ 10 May 2023 20:53:19Reported by WDC PSIRTType

Improper Neutralization of Special Elements Command Injection in Western Digital My Cloud OS

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-29842	11 May 202300:14	–	circl
CNNVD	Western Digital My Cloud 命令注入漏洞	10 May 202300:00	–	cnnvd
Cvelist	CVE-2022-29842 Command Injection Vulnerability in Western Digital My Cloud devices	10 May 202320:53	–	cvelist
EUVD	EUVD-2022-34160	3 Oct 202520:07	–	euvd
NVD	CVE-2022-29842	10 May 202321:15	–	nvd
OpenVAS	Western Digital My Cloud Multiple Products 5.x < 5.26.119 Multiple Vulnerabilities (WDC-23002)	17 Jan 202300:00	–	openvas
Prion	Command injection	10 May 202321:15	–	prion
Positive Technologies	PT-2023-12987 · Western Digital · Western Digital My Cloud Os 5	10 May 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-29842	6 Feb 202500:03	–	redhatcve
Vulnrichment	CVE-2022-29842 Command Injection Vulnerability in Western Digital My Cloud devices	10 May 202320:53	–	vulnrichment

NVD

Node

westerndigital my_cloud_osRange5.02.104–5.26.119

AND

westerndigital my_cloudMatch-

westerndigital my_cloud_dl2100Match-

westerndigital my_cloud_dl4100Match-

westerndigital my_cloud_ex2_ultraMatch-

westerndigital my_cloud_ex2100Match-

westerndigital my_cloud_ex4100Match-

westerndigital my_cloud_mirror_g2Match-

westerndigital my_cloud_pr2100Match-

westerndigital my_cloud_pr4100Match-

westerndigital wd_cloudMatch-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "My Cloud OS 5",
    "vendor": "Western Digital",
    "versions": [
      {
        "lessThan": "5.26.119",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
westerndigital	www.westerndigital.com/support/product-security/wdc-23002-my-cloud-firmware-version-5-26-119

21 Nov 2024 06:59Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

EPSS0.00922

SSVC

CWE-77