Lucene search

K
cvelistWDC PSIRTCVELIST:CVE-2022-22998
HistoryJul 12, 2022 - 8:19 p.m.

CVE-2022-22998 Protecting AWS credentials stored in plaintext on My Cloud Home

2022-07-1220:19:34
CWE-522
WDC PSIRT
www.cve.org

8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

Implemented protections on AWS credentials that were not properly protected.

CNA Affected

[
  {
    "platforms": [
      "Linux"
    ],
    "product": "My Cloud Home",
    "vendor": "Western Digital",
    "versions": [
      {
        "lessThan": "8.5.1-102",
        "status": "affected",
        "version": "My Cloud Home Firmware",
        "versionType": "custom"
      }
    ]
  }
]

8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

Related for CVELIST:CVE-2022-22998