critical10.0
CVE-2022-22995
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files.
Impact
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Westerndigital | My Cloud Pr2100 Firmware | before 5.19.117 |
| Westerndigital | My Cloud Pr4100 Firmware | before 5.19.117 |
| Westerndigital | My Cloud Ex4100 Firmware | before 5.19.117 |
| Westerndigital | My Cloud Ex2 Ultra Firmware | before 5.19.117 |
| Westerndigital | My Cloud Mirror Gen 2 Firmware | before 5.19.117 |
| Westerndigital | My Cloud Dl2100 Firmware | before 5.19.117 |
| Westerndigital | My Cloud Dl4100 Firmware | before 5.19.117 |
| Westerndigital | My Cloud Ex2100 Firmware | before 5.19.117 |
| Westerndigital | My Cloud Firmware | before 5.19.117 |
| Westerndigital | Wd Cloud Firmware | before 5.19.117 |
| Westerndigital | My Cloud Home Firmware | before 7.16-220 |
| Netatalk | Netatalk | before 3.1.18 |
Weakness classification
References
- NVD record
- CVE.org record
- https://lists.debian.org/debian-lts-announce/2024/01/msg00000.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/55ROUJI22SHZX5EM23QAILZHI67EZQKW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5CZZLFOTUP3QYHGHSDUNENGSLPJ6KGO/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2/
- https://security.gentoo.org/glsa/202311-02
- https://www.westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities
- https://lists.debian.org/debian-lts-announce/2024/01/msg00000.html
- https://lists.debian.org/debian-lts-announce/2024/11/msg00026.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/55ROUJI22SHZX5EM23QAILZHI67EZQKW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5CZZLFOTUP3QYHGHSDUNENGSLPJ6KGO/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2/
- https://security.gentoo.org/glsa/202311-02
- https://www.westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities