CVE-2022-36330

A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices. An attacker would require exploitation of another vulnerability to raise their privileges in order to exploit this buffer overflow vulnerability. This issue affects My Cloud Home and My Cloud Home Duo: before 9.4.0-191; ibi: before 9.4.0-191. 
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:westerndigital:my_cloud_home_duo_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:westerndigital:my_cloud_home_duo:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:westerndigital:my_cloud_home_duo_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:westerndigital:my_cloud_home_duo:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:westerndigital:sandisk_ibi_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:westerndigital:sandisk_ibi:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:westerndigital:my_cloud_home_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:westerndigital:my_cloud_home:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-05-10 00:15

Updated : 2024-02-28 20:13


NVD link : CVE-2022-36330

Mitre link : CVE-2022-36330

CVE.ORG link : CVE-2022-36330


JSON object : View

Products Affected

westerndigital

  • my_cloud_home_duo_firmware
  • sandisk_ibi
  • sandisk_ibi_firmware
  • my_cloud_home_firmware
  • my_cloud_home_duo
  • my_cloud_home
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')