CVE-2022-22992

A command injection remote code execution vulnerability was discovered on Western Digital My Cloud Devices that could allow an attacker to execute arbitrary system commands on the device. The vulnerability was addressed by escaping individual arguments to shell functions coming from user input.

CVSS v3 9.8 CRITICAL
CVSS v2.0 10.0 HIGH

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://www.westerndigital.com/support/product-security/wdc-22002-my-cloud-os5-firmware-5-19-117	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:westerndigital:my_cloud_os:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:westerndigital:my_cloud:-::::-:::
	cpe:2.3:h:westerndigital:my_cloud_dl2100:-:::::::*
	cpe:2.3:h:westerndigital:my_cloud_dl4100:-:::::::*
	cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-:::::::*
	cpe:2.3:h:westerndigital:my_cloud_ex2100:-:::::::*
	cpe:2.3:h:westerndigital:my_cloud_ex4100:-:::::::*
	cpe:2.3:h:westerndigital:my_cloud_mirror_gen_2:-:::::::*
	cpe:2.3:h:westerndigital:my_cloud_pr2100:-:::::::*
	cpe:2.3:h:westerndigital:my_cloud_pr4100:-:::::::*
	cpe:2.3:h:westerndigital:wd_cloud:-:::::::*

History

No history.

Information

Published : 2022-01-28 20:15

Updated : 2023-07-11 20:21

NVD link : CVE-2022-22992

Mitre link : CVE-2022-22992

CVE.ORG link : CVE-2022-22992

JSON object : View

Products Affected

westerndigital

my_cloud_ex2_ultra
my_cloud_pr4100
my_cloud_dl2100
wd_cloud
my_cloud_mirror_gen_2
my_cloud_ex2100
my_cloud_dl4100
my_cloud
my_cloud_pr2100
my_cloud_ex4100
my_cloud_os

CWE

CWE-116

Improper Encoding or Escaping of Output

{"id": "CVE-2022-22992", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "psirt@wdc.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.8, "exploitabilityScore": 1.4}]}, "published": "2022-01-28T20:15:12.707", "references": [{"url": "https://www.westerndigital.com/support/product-security/wdc-22002-my-cloud-os5-firmware-5-19-117", "tags": ["Vendor Advisory"], "source": "psirt@wdc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-116"}]}], "descriptions": [{"lang": "en", "value": "A command injection remote code execution vulnerability was discovered on Western Digital My Cloud Devices that could allow an attacker to execute arbitrary system commands on the device. The vulnerability was addressed by escaping individual arguments to shell functions coming from user input."}, {"lang": "es", "value": "Se ha detectado una vulnerabilidad de ejecuci\u00f3n de c\u00f3digo remota por inyecci\u00f3n de comandos en los dispositivos My Cloud de Western Digital que podr\u00eda permitir a un atacante ejecutar comandos arbitrarios del sistema en el dispositivo. La vulnerabilidad fue abordada al escapar de los argumentos individuales a las funciones de shell procedentes de la entrada del usuario"}], "lastModified": "2023-07-11T20:21:53.707", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:westerndigital:my_cloud_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B585AE9-1F28-42D7-B16D-75BF1CB8A054", "versionEndExcluding": "5.19.117"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:westerndigital:my_cloud:-:*:*:*:-:*:*:*", "vulnerable": false, "matchCriteriaId": "F597DB20-7E49-4234-AB58-B944E6D3F9EA"}, {"criteria": "cpe:2.3:h:westerndigital:my_cloud_dl2100:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9E783EBC-7608-4527-B1AD-9B4E7A7A108C"}, {"criteria": "cpe:2.3:h:westerndigital:my_cloud_dl4100:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F3034F4A-239C-4E38-9BD6-217361A7C519"}, {"criteria": "cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5A581EBA-A1F2-4ABC-8183-29973A46FA43"}, {"criteria": "cpe:2.3:h:westerndigital:my_cloud_ex2100:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ABBBDC1E-2320-4767-B669-1BB2FFB1E1C4"}, {"criteria": "cpe:2.3:h:westerndigital:my_cloud_ex4100:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B78030F0-6655-4604-9D16-2FA1F3FD52FF"}, {"criteria": "cpe:2.3:h:westerndigital:my_cloud_mirror_gen_2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5695E842-1561-4A4F-901F-6EC07F558989"}, {"criteria": "cpe:2.3:h:westerndigital:my_cloud_pr2100:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BF58260B-2131-402C-A9DA-67B188136DE1"}, {"criteria": "cpe:2.3:h:westerndigital:my_cloud_pr4100:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CB0C2FD9-4792-4DA2-9698-E53109A499EC"}, {"criteria": "cpe:2.3:h:westerndigital:wd_cloud:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8FDE0337-4329-4CE3-9B0B-61BE8361E910"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@wdc.com"}