CVE-2022-36330

CVSS V2 None CVSS V3 None

Description

A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices. An attacker would require exploitation of another vulnerability to raise their privileges in order to exploit this buffer overflow vulnerability. This issue affects My Cloud Home and My Cloud Home Duo: through 9.4.0-191; ibi: through 9.4.0-191.

Overview

CVE ID
CVE-2022-36330

Assigner
psirt@wdc.com

Vulnerability Status
Received

Published Version
2023-05-10T00:15:09

Last Modified Date
2023-05-10T00:15:09

Weakness Enumerations

CWE	URL
CWE-120	http://cwe.mitre.org/data/definitions/120.html

References

Reference URL	Reference Tags
https://www.westerndigital.com/support/product-security/wdc-23003-western-digital-my-cloud-home-my-cloud-home-duo-and-sandisk-ibi-firmware-version-9-4-0-191

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-36330
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36330

History

Created	Old Value	New Value	Data Type	Notes
2023-05-10 01:01:14				Added to TrackCVE
2023-05-10 01:01:14			Weakness Enumeration	new