← Database
CVE-2022-29844
MEDIUM
CVSS: 6.7
Published: 2023-01-26
Modified: 2026-06-17
Description
A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to read and write arbitrary files. This could lead to a full NAS compromise and would give remote execution capabilities to the attacker.
Affected Platforms
Westerndigital My Cloud Ex4100 FirmwareWesterndigital My Cloud Pr2100 FirmwareWesterndigital My Cloud Pr4100Westerndigital My Cloud Pr2100Westerndigital My Cloud Dl4100 FirmwareWesterndigital My Cloud Dl2100Westerndigital My Cloud Dl2100 FirmwareWesterndigital My Cloud Ex2100Westerndigital My Cloud Pr4100 FirmwareWesterndigital My Cloud Mirror G2
Weakness Type
CWE-23, CWE-22