CVE-2022-36326

🗓️ 18 May 2023 17:53:21Reported by WDC PSIRTType

Uncontrolled resource consumption vulnerability in Western Digital My Cloud Home, My Cloud Home Duo, SanDisk ibi, and My Cloud OS 5 devices

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-36326	18 May 202322:32	–	circl
CNNVD	多款Western Digital产品资源管理错误漏洞	18 May 202300:00	–	cnnvd
Cvelist	CVE-2022-36326 Resource Exhaustion Vulnerability in Western Digital devices	18 May 202317:53	–	cvelist
EUVD	EUVD-2022-39042	3 Oct 202520:07	–	euvd
NVD	CVE-2022-36326	18 May 202318:15	–	nvd
OpenVAS	Western Digital My Cloud Multiple Products 5.x < 5.26.202 Multiple Vulnerabilities (WDC-23006, WDC-23009)	19 May 202300:00	–	openvas
Prion	Code injection	18 May 202318:15	–	prion
Positive Technologies	PT-2023-13474 · Western Digital +1 · Western Digital My Cloud Os 5 +2	18 May 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-36326	22 May 202522:12	–	redhatcve
Vulnrichment	CVE-2022-36326 Resource Exhaustion Vulnerability in Western Digital devices	18 May 202317:53	–	vulnrichment

NVD

Node

westerndigital my_cloud_os_5Range<5.26.202

AND

westerndigital my_cloudMatch-

westerndigital my_cloud_dl2100Match-

westerndigital my_cloud_dl4100Match-

westerndigital my_cloud_ex2_ultraMatch-

westerndigital my_cloud_ex2100Match-

westerndigital my_cloud_ex4100Match-

westerndigital my_cloud_mirror_g2Match-

westerndigital my_cloud_pr2100Match-

westerndigital my_cloud_pr4100Match-

westerndigital wd_cloudMatch-

Node

westerndigital my_cloud_home_firmwareRange<9.4.0-191

AND

westerndigital my_cloud_homeMatch-

Node

westerndigital sandisk_ibi_firmwareRange<9.4.0-191

AND

westerndigital sandisk_ibiMatch-

Node

westerndigital my_cloud_home_duo_firmwareRange<9.4.0-191

AND

westerndigital my_cloud_home_duoMatch-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "My Cloud Home and My Cloud Home Duo",
    "vendor": "Western Digital",
    "versions": [
      {
        "lessThan": " 9.4.0-191",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "ibi",
    "vendor": "SanDisk",
    "versions": [
      {
        "lessThan": " 9.4.0-191",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "My Cloud OS 5",
    "vendor": "Western Digital",
    "versions": [
      {
        "lessThan": "5.26.202",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
westerndigital	www.westerndigital.com/support/product-security/wdc-23006-my-cloud-firmware-version-5-26-202
westerndigital	www.westerndigital.com/support/product-security/wdc-23003-western-digital-my-cloud-home-my-cloud-home-duo-and-sandisk-ibi-firmware-version-9-4-0-191

21 Nov 2024 07:12Current

4.8Medium risk

Vulners AI Score4.8

CVSS 3.14.4 - 4.9

EPSS0.00177

SSVC

CWE-400