← Database
CVE-2022-22992
HIGH
CVSS: 7.8
Published: 2022-01-28
Modified: 2026-06-17
Description
A command injection remote code execution vulnerability was discovered on Western Digital My Cloud Devices that could allow an attacker to execute arbitrary system commands on the device. The vulnerability was addressed by escaping individual arguments to shell functions coming from user input.
Affected Platforms
Westerndigital My Cloud OsWesterndigital My Cloud Pr2100Westerndigital My Cloud Pr4100Westerndigital My Cloud Dl2100Westerndigital My Cloud Ex2100Westerndigital My CloudWesterndigital Wd CloudWesterndigital My Cloud Mirror Gen 2Westerndigital My Cloud Ex2 UltraWesterndigital My Cloud Dl4100