CVE-2022-23000 | ByteOS Network

Vulnerability Details :

CVE-2022-23000

Assigner-WDC PSIRT

Assigner Org ID-cb3b742e-5145-4748-b44b-5ffd45bf3b6a

Published At-25 Jul, 2022 | 18:46

Updated At-03 Aug, 2024 | 03:28

Weak Default SSL use in Port Forwarding Service

The Western Digital My Cloud Web App [https://os5.mycloud.com/] uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead of "TLS" or specifying stronger validation, deprecated or insecure protocols are permitted. As a result, a local user with no privileges can exploit this vulnerability and jeopardize the integrity, confidentiality and authenticity of information transmitted. The scope of impact cannot extend to other components and no user input is required to exploit this vulnerability.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:WDC PSIRT

Assigner Org ID:cb3b742e-5145-4748-b44b-5ffd45bf3b6a

Published At:25 Jul, 2022 | 18:46

Updated At:03 Aug, 2024 | 03:28

▼CVE Numbering Authority (CNA)

Weak Default SSL use in Port Forwarding Service

The Western Digital My Cloud Web App [https://os5.mycloud.com/] uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead of "TLS" or specifying stronger validation, deprecated or insecure protocols are permitted. As a result, a local user with no privileges can exploit this vulnerability and jeopardize the integrity, confidentiality and authenticity of information transmitted. The scope of impact cannot extend to other components and no user input is required to exploit this vulnerability.

Affected Products

Vendor

Western Digital Corp.

Product

Platforms

Linux

Versions

Affected

From My Cloud OS 5 before 5.23.114 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-757	CWE-757 Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

Type: CWE

CWE ID: CWE-757

Description: CWE-757 Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

Metrics

Version	Base score	Base severity	Vector
3.1	7.3	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

Version: 3.1

Base score: 7.3

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

Solutions

To take advantage of the latest security fixes, Western Digital recommends that users promptly update their devices to the latest firmware by clicking on the firmware update notification.

References

Hyperlink	Resource
https://www.westerndigital.com/support/product-security/wdc-22011-my-cloud-firmware-version-5-23-114	x_refsource_MISC

Hyperlink: https://www.westerndigital.com/support/product-security/wdc-22011-my-cloud-firmware-version-5-23-114

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.westerndigital.com/support/product-security/wdc-22011-my-cloud-firmware-version-5-23-114	x_refsource_MISC x_transferred

Hyperlink: https://www.westerndigital.com/support/product-security/wdc-22011-my-cloud-firmware-version-5-23-114

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

Source:psirt@wdc.com

Published At:25 Jul, 2022 | 19:15

Updated At:03 Aug, 2022 | 18:30

The Western Digital My Cloud Web App [https://os5.mycloud.com/] uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead of "TLS" or specifying stronger validation, deprecated or insecure protocols are permitted. As a result, a local user with no privileges can exploit this vulnerability and jeopardize the integrity, confidentiality and authenticity of information transmitted. The scope of impact cannot extend to other components and no user input is required to exploit this vulnerability.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	7.3	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 7.3

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

CPE Matches

Western Digital Corp.

>>my_cloud_pr2100_firmware>>Versions before 5.23.114(exclusive)

cpe:2.3:o:westerndigital:my_cloud_pr2100_firmware:*:*:*:*:*:*:*:*

Western Digital Corp.

>>my_cloud_pr2100>>-

cpe:2.3:h:westerndigital:my_cloud_pr2100:-:*:*:*:*:*:*:*

Western Digital Corp.

>>my_cloud_pr4100_firmware>>Versions before 5.23.114(exclusive)

cpe:2.3:o:westerndigital:my_cloud_pr4100_firmware:*:*:*:*:*:*:*:*

Western Digital Corp.

>>my_cloud_pr4100>>-

cpe:2.3:h:westerndigital:my_cloud_pr4100:-:*:*:*:*:*:*:*

Western Digital Corp.

>>my_cloud_ex4100_firmware>>Versions before 5.23.114(exclusive)

cpe:2.3:o:westerndigital:my_cloud_ex4100_firmware:*:*:*:*:*:*:*:*

Western Digital Corp.

>>my_cloud_ex4100>>-

cpe:2.3:h:westerndigital:my_cloud_ex4100:-:*:*:*:*:*:*:*

Western Digital Corp.

>>my_cloud_ex2_ultra_firmware>>Versions before 5.23.114(exclusive)

cpe:2.3:o:westerndigital:my_cloud_ex2_ultra_firmware:*:*:*:*:*:*:*:*

Western Digital Corp.

>>my_cloud_ex2_ultra>>-

cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-:*:*:*:*:*:*:*

Western Digital Corp.

>>my_cloud_mirror_g2_firmware>>Versions before 5.23.114(exclusive)

cpe:2.3:o:westerndigital:my_cloud_mirror_g2_firmware:*:*:*:*:*:*:*:*

Western Digital Corp.

>>my_cloud_mirror_g2>>-

cpe:2.3:h:westerndigital:my_cloud_mirror_g2:-:*:*:*:*:*:*:*

Western Digital Corp.

>>my_cloud_dl2100_firmware>>Versions before 5.23.114(exclusive)

cpe:2.3:o:westerndigital:my_cloud_dl2100_firmware:*:*:*:*:*:*:*:*

Western Digital Corp.

>>my_cloud_dl2100>>-

cpe:2.3:h:westerndigital:my_cloud_dl2100:-:*:*:*:*:*:*:*

Western Digital Corp.

>>my_cloud_dl4100_firmware>>Versions before 5.23.114(exclusive)

cpe:2.3:o:westerndigital:my_cloud_dl4100_firmware:*:*:*:*:*:*:*:*

Western Digital Corp.

>>my_cloud_dl4100>>-

cpe:2.3:h:westerndigital:my_cloud_dl4100:-:*:*:*:*:*:*:*

Western Digital Corp.

>>my_cloud_ex2100_firmware>>Versions before 5.23.114(exclusive)

cpe:2.3:o:westerndigital:my_cloud_ex2100_firmware:*:*:*:*:*:*:*:*

Western Digital Corp.

>>my_cloud_ex2100>>-

cpe:2.3:h:westerndigital:my_cloud_ex2100:-:*:*:*:*:*:*:*

Western Digital Corp.

>>my_cloud_firmware>>Versions before 5.23.114(exclusive)

cpe:2.3:o:westerndigital:my_cloud_firmware:*:*:*:*:*:*:*:*

Western Digital Corp.

cpe:2.3:h:westerndigital:my_cloud:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov
CWE-757	Secondary	psirt@wdc.com

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-757

Type: Secondary

Source: psirt@wdc.com

References

Hyperlink	Source	Resource
https://www.westerndigital.com/support/product-security/wdc-22011-my-cloud-firmware-version-5-23-114	psirt@wdc.com	Vendor Advisory

Hyperlink: https://www.westerndigital.com/support/product-security/wdc-22011-my-cloud-firmware-version-5-23-114

Source: psirt@wdc.com

Resource:

Vendor Advisory

Similar CVEs

2Records found

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-1.14% / 78.03%

||

7 Day CHG~0.00%

Published-10 Mar, 2021 | 04:55

Updated-03 Aug, 2024 | 16:53

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure (by reading local files).

Vendor-n/a Western Digital Corp.

Product-my_cloud_dl2100 my_cloud_ex4100 my_cloud_ex2_ultra my_cloud_pr2100 my_cloud_mirror_gen_2 my_cloud_os my_cloud_dl4100 my_cloud_ex2100 my_cloud_pr4100 n/a

CWE ID-CWE-59

Improper Link Resolution Before File Access ('Link Following')

Matching Score-8

Assigner-Western Digital

Matching Score-8

Assigner-Western Digital

CVSS Score-4.7||MEDIUM

EPSS-0.09% / 25.92%

||

7 Day CHG~0.00%

Published-01 Dec, 2022 | 00:00

Updated-24 Apr, 2025 | 20:12

Path traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices

A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which could allow an attacker to initiate installation of custom ZIP packages and overwrite system files. This could potentially lead to a code execution.

Vendor-Sandisk Corp.Western Digital Corp.

Product-sandisk_ibi_firmware sandisk_ibi my_cloud_home my_cloud_home_firmware my_cloud_home_duo_firmware my_cloud_home_duo ibi My Cloud Home

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')