← Database

CVE-2022-22989

CRITICAL CVSS: 9.8 Published: 2022-01-13 Modified: 2026-06-17

Description

My Cloud OS 5 was vulnerable to a pre-authenticated stack overflow vulnerability on the FTP service that could be exploited by unauthenticated attackers on the network. Addressed the vulnerability by adding defenses against stack overflow issues.

Affected Platforms

Westerndigital My Cloud OsWesterndigital My Cloud Pr2100Westerndigital My Cloud Pr4100Westerndigital My Cloud Dl2100Westerndigital My Cloud Ex2100Westerndigital My CloudWesterndigital Wd CloudWesterndigital My Cloud Mirror Gen 2Westerndigital My Cloud Ex2 UltraWesterndigital My Cloud Dl4100

Weakness Type

CWE-121, CWE-787

References