Command injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability that could allow an attacker to execute code in the context of the root user on a vulnerable CGI file was discovered in Western Digital My Cloud OS 5 devicesThis issue affects My Cloud OS 5: before...

CVE-2022-29841 OS Command Injection vulnerability in Western Digital My Cloud devices

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that was caused by a command that read files from a privileged location and created a system command without sanitizing the read data. This command could be triggered by an attacker remotely to...

CVE-2022-29841

CVE-2022-29841 is an OS Command Injection affecting Western Digital My Cloud OS 5 prior to 5.26.119. The flaw arises from a command that reads files from a privileged location and creates a system command without proper sanitization, enabling remote code execution and a reverse shell when exploit...

CVE-2022-29842 Command Injection Vulnerability in Western Digital My Cloud devices

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability that could allow an attacker to execute code in the context of the root user on a vulnerable CGI file was discovered in Western Digital My Cloud OS 5 devicesThis issue affects My Cloud OS 5: before...

CVE-2022-29842 Command Injection Vulnerability in Western Digital My Cloud devices

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability that could allow an attacker to execute code in the context of the root user on a vulnerable CGI file was discovered in Western Digital My Cloud OS 5 devicesThis issue affects My Cloud OS 5: before...

CVE-2022-29842

CVE-2022-29842 affects Western Digital My Cloud OS 5 devices, prior to version 5.26.119. The issue is a Command Injection vulnerability in the CGI file (account_mgr) that can allow an attacker to execute code in the root context. Some sources describe this as remote code execution with network ac...

CVE-2022-36329

An improper privilege management issue that could allow an attacker to cause a denial of service over the OTA mechanism was discovered in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices.This issue affects My Cloud Home and My Cloud Home Duo: before 9.4.0-191; ibi: before...

CVE-2022-36329

An improper privilege management issue that could allow an attacker to cause a denial of service over the OTA mechanism was discovered in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices.This issue affects My Cloud Home and My Cloud Home Duo: before 9.4.0-191; ibi: before...

Input validation

An improper privilege management issue that could allow an attacker to cause a denial of service over the OTA mechanism was discovered in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices.This issue affects My Cloud Home and My Cloud Home Duo: before 9.4.0-191; ibi: before...

CVE-2022-36329 Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices

An improper privilege management issue that could allow an attacker to cause a denial of service over the OTA mechanism was discovered in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices.This issue affects My Cloud Home and My Cloud Home Duo: before 9.4.0-191; ibi: before...

CVE-2022-36329 Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices

An improper privilege management issue that could allow an attacker to cause a denial of service over the OTA mechanism was discovered in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices.This issue affects My Cloud Home and My Cloud Home Duo: before 9.4.0-191; ibi: before...

CVE-2022-36329

The CVE-2022-36329 issue affects Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices. The root cause is improper privilege management that can allow an attacker to cause a denial of service over the OTA mechanism. Affected versions are before 9.4.0-191 for My Cloud Home and ...

Buffer overflow

A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices. An attacker would require exploitation of another vulnerability to raise their...

PT-2023-12987 · Western Digital · Western Digital My Cloud Os 5

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud OS 5 versions prior to 5.26.119 Description: An issue was discovered in Western Digital My Cloud OS 5 devices, allowing an attacker to execute code in the context of the root user on a vulnerable CGI file due to...

Western Digital My Cloud 操作系统命令注入漏洞

Western Digital My Cloud is a personal cloud storage device from Western Digital. A security vulnerability exists in Western Digital My Cloud OS 5 prior to version 5.26.119, which stems from an operating system command injection vulnerability that can be exploited by an attacker to remotely execu...

Western Digital My Cloud OS 代码问题漏洞

Western Digital My Cloud is a personal cloud storage device from Western Digital. A code issue vulnerability exists in Western Digital My Cloud OS 5 prior to version 5.26.202, which stems from the presence of a server-side request forgery SSRF vulnerability...

PT-2023-13476 · Sandisk +1 · Sandisk Ibi +1

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud Home versions prior to 9.4.0-191 Western Digital My Cloud Home Duo versions prior to 9.4.0-191 SanDisk ibi versions prior to 9.4.0-191 Description: An improper privilege management issue could allow an attacker to cau...

Western Digital My Cloud 命令注入漏洞

Western Digital My Cloud is a personal cloud storage device from Western Digital. A security vulnerability exists in Western Digital My Cloud OS 5 prior to version 5.26.119, which stems from a command injection vulnerability that could allow an attacker to execute code against vulnerable CGI file...

CVE-2022-36330

CVE-2022-36330 is a buffer overflow vulnerability affecting Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices. The issue stems from firmware version validation and could enable an unauthenticated remote code execution, with exploitation requiring prior privilege escalation...

CVE-2022-36330 Buffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices

A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices. An attacker would require exploitation of another vulnerability to raise their...