CVEvulnerability

CVE-2022-29837

7.8 HIGH Published 2022-12-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-12-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-22

Description

A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which could allow an attacker to initiate installation of custom ZIP packages and overwrite system files. This could potentially lead to a code execution.

Affected configurations

• westerndigital my cloud home firmware (< 8.12.0-178) • westerndigital my cloud home duo firmware (< 8.12.0-178) • westerndigital sandisk ibi firmware (< 8.12.0-178)

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References