← Database
CVE-2022-29842
CRITICAL
CVSS: 9.8
Published: 2023-05-10
Modified: 2026-06-17
Description
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability that could allow an attacker to execute code in the context of the root user on a vulnerable CGI file was discovered in Western Digital My Cloud OS 5 devicesThis issue affects My Cloud OS 5: before 5.26.119.
Affected Platforms
Westerndigital My Cloud OsWesterndigital My Cloud Pr2100Westerndigital My Cloud Pr4100Westerndigital My Cloud Dl2100Westerndigital My Cloud Ex2100Westerndigital My CloudWesterndigital My Cloud Mirror G2Westerndigital Wd CloudWesterndigital My Cloud Ex2 UltraWesterndigital My Cloud Dl4100
Weakness Type
CWE-77, CWE-77