← Database
CVE-2022-29840
MEDIUM
CVSS: 5.1
Published: 2023-05-10
Modified: 2026-06-17
Description
Server-Side Request Forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL to point back to the loopback adapter was addressed in Western Digital My Cloud OS 5 devices. This could allow the URL to exploit other vulnerabilities on the local server.This issue affects My Cloud OS 5 devices before 5.26.202.
Affected Platforms
Westerndigital My Cloud OsWesterndigital My Cloud Pr2100Westerndigital My Cloud Pr4100Westerndigital My Cloud Dl2100Westerndigital My Cloud Ex2100Westerndigital My CloudWesterndigital My Cloud Mirror G2Westerndigital Wd CloudWesterndigital My Cloud Ex2 UltraWesterndigital My Cloud Dl4100
Weakness Type
CWE-918, CWE-918