← Database

CVE-2023-22814

CRITICAL CVSS: 10.0 Published: 2023-07-01 Modified: 2026-06-17

Description

An authentication bypass issue via spoofing was discovered in the token-based authentication mechanism that could allow an attacker to carry out an impersonation attack. This issue affects My Cloud OS 5 devices: before 5.26.202.

Affected Platforms

Westerndigital My Cloud OsWesterndigital My Cloud Pr2100Westerndigital My Cloud Pr4100Westerndigital My Cloud Dl2100Westerndigital My Cloud Ex2100Westerndigital My CloudWesterndigital My Cloud Mirror G2Westerndigital Wd CloudWesterndigital My Cloud Ex2 UltraWesterndigital My Cloud Dl4100

Weakness Type

CWE-290, CWE-290

References