medium6.8
CVE-2022-22997
Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 bucket that potentially allowed an attacke…
Impact
Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 bucket that potentially allowed an attacker to execute unsigned code on My Cloud Home devices.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Westerndigital | My Cloud Home Duo Firmware | before 8.5.1-102 |
| Westerndigital | My Cloud Home Firmware | before 8.5.1-102 |