Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-29840
HistoryMay 10, 2023 - 11:15 p.m.

Server side request forgery (ssrf)

2023-05-1023:15:00
PRIOn knowledge base
www.prio-n.com
3
server-side request forgery
ssrf
url modification
local network
loopback adapter
security vulnerability
exploit
my cloud os 5
nvd
firmware version 5.26.202

5.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.4%

Server-Side Request Forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL to point back to the loopback adapter was addressed in Western Digital My Cloud OS 5 devices. This could allow the URL to exploit other vulnerabilities on the local server.This issue affects My Cloud OS 5 devices before 5.26.202.

CPENameOperatorVersion
my_cloud_osge5.02.104
my_cloud_oslt5.26.202

5.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.4%

Related for PRION:CVE-2022-29840