This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2022-29837 | BDVDB-2026-189644 Detail

Western DigitalMy Cloud Home

Description#

A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which could allow an attacker to initiate installation of custom ZIP packages and overwrite system files. This could potentially lead to a code execution.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact high, availability impact none. Attack vector: local.

Weaknesses#

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.