← Database

CVE-2022-22995

CRITICAL CVSS: 10.0 Published: 2022-03-25 Modified: 2026-06-17

Description

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.

Affected Platforms

Westerndigital My Cloud Dl2100Westerndigital My Cloud Ex2 UltraWesterndigital My Cloud Ex2 Ultra FirmwareWesterndigital My Cloud Dl4100Westerndigital My Cloud Pr2100 FirmwareNetatalk NetatalkWesterndigital My Cloud Ex2100 FirmwareWesterndigital My Cloud Ex4100Westerndigital My Cloud HomeWesterndigital My Cloud Mirror Gen 2 Firmware

Weakness Type

CWE-59, CWE-59

References