← Database

CVE-2022-29837

MEDIUM CVSS: 4.7 Published: 2022-12-01 Modified: 2026-06-17

Description

A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which could allow an attacker to initiate installation of custom ZIP packages and overwrite system files. This could potentially lead to a code execution.

Affected Platforms

Westerndigital My Cloud Home Duo FirmwareWesterndigital My Cloud Home FirmwareWesterndigital My Cloud HomeWesterndigital My Cloud Home DuoWesterndigital Sandisk Ibi FirmwareWesterndigital Sandisk Ibi

Weakness Type

CWE-22, CWE-22

References