CVE-2022-29844 — Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp

CVE-2022-29844

Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp PUBLISHED

Description (CNA)

A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to read and write arbitrary files. This could lead to a full NAS compromise and would give remote execution capabilities to the attacker.

Affected (CNA)

Vendor / product	Versions
Western Digital / My Cloud	affected My Cloud OS 5 before 5.26.119

CWE

CWE-23

References

https://www.westerndigital.com/en-in/support/product-security/wdc-23002-my-cloud-firmware-version-5-26-119

ADP enrichment

CVE

No English description supplied.

https://www.westerndigital.com/en-in/support/product-security/wdc-23002-my-cloud-firmware-version-5-26-119

CISA-ADP

No English description supplied.

No references supplied.