CVE-2022-29843 — Western Digital My Cloud OS 5 devices Command Injection Vulnerability

CVE-2022-29843

Western Digital My Cloud OS 5 devices Command Injection Vulnerability PUBLISHED

Description (CNA)

A command injection vulnerability in the DDNS service configuration of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to execute code in the context of the root user.

Affected (CNA)

Vendor / product	Versions
Western Digital / My Cloud	affected My Cloud OS 5 before 5.26.119

CWE

CWE-78

References

https://www.westerndigital.com/en-in/support/product-security/wdc-23002-my-cloud-firmware-version-5-26-119

ADP enrichment

CVE

No English description supplied.

https://www.westerndigital.com/en-in/support/product-security/wdc-23002-my-cloud-firmware-version-5-26-119

CISA-ADP

No English description supplied.

No references supplied.