CVE-2022-36331
Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attack that could allow an unauthenticated attacker to gain access to user data. This issue affects My Cloud OS 5 devices: before 5.25.132; My Cloud Home and My Cloud Home Duo: before 8.13.1-102; SanDisk ibi: before 8.13.1-102.
- Score
- CVSS 3.1 10.0 Critical
- Status
- Modified - psirt@wdc.com
- Published
- 2023-06-12
- Last modified
- 2025-01-03
- Weaknesses
- CWE-290
Affected products
- Ibi (Sandisk)
- My Cloud Home And My Cloud Home Duo (Western Digital)
- My Cloud Os 5 (Western Digital)
- My Cloud Dl2100 Firmware (Westerndigital)
- My Cloud Dl4100 Firmware (Westerndigital)
- My Cloud Ex2100 Firmware (Westerndigital)
- My Cloud Ex2 Ultra Firmware (Westerndigital)
- My Cloud Ex4100 Firmware (Westerndigital)
- My Cloud Firmware (Westerndigital)
- My Cloud Home Duo Firmware (Westerndigital)
- My Cloud Home Firmware (Westerndigital)
- My Cloud Mirror G2 Firmware (Westerndigital)
- My Cloud Pr2100 Firmware (Westerndigital)
- My Cloud Pr4100 Firmware (Westerndigital)
- Sandisk Ibi Firmware (Westerndigital)
References
- https://https://www.westerndigital.com/support/product-security/wdc-22020-my-cloud-os-5-my-cloud-home-ibi-firmware-upda…
- https://www.westerndigital.com/support/product-security/wdc-22020-my-cloud-os-5-my-cloud-home-ibi-firmware-update
