CVE-2022-23000

The Western Digital My Cloud Web App https://os5.mycloud.com/ uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead of "TLS" or specifying stronger validation,...

CVE-2022-23000 Weak Default SSL use in Port Forwarding Service

The Western Digital My Cloud Web App https://os5.mycloud.com/ uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead of "TLS" or specifying stronger validation,...

CVE-2022-23000

CVE-2022-23000 affects Western Digital My Cloud Web App (os5.mycloud.com). The issue is a weak SSLContext used when configuring port forwarding rules, due to using an "SSL" context instead of TLS or stronger validation. Root cause: deprecated/insecure protocol support is retained to maintain comp...