CVE-2023-22817

🗓️ 05 Feb 2024 21:26:42Reported by WDC PSIRTType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 39 Views

CVE-2023-22817: SSRF vulnerability allows rogue server to modify URL and exploit local server vulnerabilities

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-22817	5 Feb 202423:26	–	circl
CNNVD	My Cloud Multiple Products Code Issue Vulnerability	5 Feb 202400:00	–	cnnvd
Cvelist	CVE-2023-22817 Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products	5 Feb 202421:26	–	cvelist
EUVD	EUVD-2023-26929	3 Oct 202520:07	–	euvd
NVD	CVE-2023-22817	5 Feb 202422:15	–	nvd
OpenVAS	Western Digital My Cloud Multiple Products 5.x < 5.27.161 Multiple Vulnerabilities (WDC-24001)	23 Jan 202400:00	–	openvas
Prion	Server side request forgery (ssrf)	5 Feb 202422:15	–	prion
Positive Technologies	PT-2024-1674 · Western Digital · My Cloud Home Duo +3	5 Feb 202400:00	–	ptsecurity
RedhatCVE	CVE-2023-22817	23 May 202505:53	–	redhatcve
Vulnrichment	CVE-2023-22817 Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products	5 Feb 202421:26	–	vulnrichment

NVD

Node

westerndigital my_cloud_pr2100_firmwareRange<5.27.161

AND

westerndigital my_cloud_pr2100Match-

Node

westerndigital my_cloud_pr4100_firmwareRange<5.27.161

AND

westerndigital my_cloud_pr4100Match-

Node

westerndigital my_cloud_ex4100_firmwareRange<5.27.161

AND

westerndigital my_cloud_ex4100Match-

Node

westerndigital my_cloud_ex2_ultra_firmwareRange<5.27.161

AND

westerndigital my_cloud_ex2_ultraMatch-

Node

westerndigital my_cloud_mirror_g2_firmwareRange<5.27.161

AND

westerndigital my_cloud_mirror_g2Match-

Node

westerndigital my_cloud_dl2100_firmwareRange<5.27.161

AND

westerndigital my_cloud_dl2100Match-

Node

westerndigital my_cloud_dl4100_firmwareRange<5.27.161

AND

westerndigital my_cloud_dl4100Match-

Node

westerndigital my_cloud_ex2100_firmwareRange<5.27.161

AND

westerndigital my_cloud_ex2100Match-

Node

westerndigital my_cloud_glacier_firmwareRange<5.27.161

AND

westerndigital my_cloud_glacierMatch-

Node

westerndigital wd_cloud_firmwareRange<5.27.161

AND

westerndigital wd_cloudMatch-

Node

westerndigital my_cloud_home_firmwareRange<9.5.1-104

AND

westerndigital my_cloud_homeMatch-

Node

westerndigital my_cloud_home_duo_firmwareRange<9.5.1-104

AND

westerndigital my_cloud_home_duoMatch-

Node

westerndigital sandisk_ibi_firmwareRange<9.5.1-104

AND

westerndigital sandisk_ibiMatch-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "My Cloud OS 5",
    "vendor": "Western Digital",
    "versions": [
      {
        "lessThan": "5.27.161",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "My Cloud Home & Duo",
    "vendor": "Western Digital",
    "versions": [
      {
        "lessThan": "9.5.1-104",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "ibi",
    "vendor": "SanDisk",
    "versions": [
      {
        "lessThan": "9.5.1-104",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
westerndigital	www.westerndigital.com/support/product-security/wdc-24001-western-digital-my-cloud-os-5-my-cloud-home-duo-and-sandisk-ibi-firmware-update

21 Nov 2024 07:45Current

6Medium risk

Vulners AI Score6

CVSS 3.15.5

EPSS0.0008

SSVC

CWE-918