Lucene search

PRIOn knowledge basePRION:CVE-2022-29842

HistoryMay 10, 2023 - 9:15 p.m.

Command injection

2023-05-1021:15:00

PRIOn knowledge base

www.prio-n.com

command injection

vulnerability

western digital my cloud os 5

cgi file

execute code

root user

nvd

security issue

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.1%

JSON

Improper Neutralization of Special Elements used in a Command (‘Command Injection’) vulnerability that could allow an attacker to execute code in the context of the root user on a vulnerable CGI file was discovered in Western Digital My Cloud OS 5 devicesThis issue affects My Cloud OS 5: before 5.26.119.

CPENameOperatorVersion
my_cloud_osge5.02.104
my_cloud_oslt5.26.119

CPE	Name	Operator	Version
	my_cloud_os	ge	5.02.104
	my_cloud_os	lt	5.26.119

References

www.westerndigital.com/support/product-security/wdc-23002-my-cloud-firmware-version-5-26-119