← Database
CVE-2023-22816
MEDIUM
CVSS: 6.0
Published: 2023-06-30
Modified: 2026-06-17
Description
A post-authentication remote command injection vulnerability in a CGI file in Western Digital My Cloud OS 5 devices that could allow an attacker to build files with redirects and execute larger payloads.
This issue affects My Cloud OS 5 devices: before 5.26.300.
Affected Platforms
Westerndigital My Cloud OsWesterndigital My Cloud Pr2100Westerndigital My Cloud Pr4100Westerndigital My Cloud Dl2100Westerndigital My Cloud Ex2100Westerndigital My CloudWesterndigital My Cloud Mirror G2Westerndigital Wd CloudWesterndigital My Cloud Ex2 UltraWesterndigital My Cloud Dl4100
Weakness Type
CWE-78, CWE-77