Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk
Priority MEDIUM 48CWE-59Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
Why it matters now
EPSS 0.02735 86th percentileScored 2026-11-07
Fix Fixed My Cloud (Western Digital): 5.19.117My Cloud Home (Western Digital): 7.16-220
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Western Digital | My Cloud | My Cloud OS 5 to before 5.19.117 | 5.19.117 | Patch available | CNA |
| Western Digital | My Cloud Home | My Cloud Home to before 7.16-220 | 7.16-220 | Patch available | CNA |
- My Cloud VendorWestern Digital Affected My Cloud OS 5 to before 5.19.117 Fixed in 5.19.117 Patch available CNA
- My Cloud Home VendorWestern Digital Affected My Cloud Home to before 7.16-220 Fixed in 7.16-220 Patch available CNA
CPE configurations NVD · 26
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:westerndigital:my_cloud_pr2100_firmware:*:*:*:*:*:*:*:* | before 5.19.117 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_pr2100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_pr4100_firmware:*:*:*:*:*:*:*:* | before 5.19.117 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_pr4100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_ex4100_firmware:*:*:*:*:*:*:*:* | before 5.19.117 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_ex4100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_ex2_ultra_firmware:*:*:*:*:*:*:*:* | before 5.19.117 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_mirror_gen_2_firmware:*:*:*:*:*:*:*:* | before 5.19.117 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_mirror_gen_2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
- cpe:2.3:o:westerndigital:my_cloud_pr2100_firmware:*:*:*:*:*:*:*:* Versions before 5.19.117 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_pr2100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_pr4100_firmware:*:*:*:*:*:*:*:* Versions before 5.19.117 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_pr4100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_ex4100_firmware:*:*:*:*:*:*:*:* Versions before 5.19.117 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_ex4100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_ex2_ultra_firmware:*:*:*:*:*:*:*:* Versions before 5.19.117 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_mirror_gen_2_firmware:*:*:*:*:*:*:*:* Versions before 5.19.117 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_mirror_gen_2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
Show 16 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:westerndigital:my_cloud_dl2100_firmware:*:*:*:*:*:*:*:* | before 5.19.117 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_dl2100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_dl4100_firmware:*:*:*:*:*:*:*:* | before 5.19.117 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_dl4100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_ex2100_firmware:*:*:*:*:*:*:*:* | before 5.19.117 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_ex2100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_firmware:*:*:*:*:*:*:*:* | before 5.19.117 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:wd_cloud_firmware:*:*:*:*:*:*:*:* | before 5.19.117 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:wd_cloud:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_home_firmware:*:*:*:*:*:*:*:* | before 7.16-220 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_home:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:a:netatalk:netatalk:*:*:*:*:*:*:*:* | before 3.1.18 | Vulnerable | Netatalk |
| cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* | 37 | Vulnerable | Fedoraproject |
| cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* | 38 | Vulnerable | Fedoraproject |
| cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* | 39 | Vulnerable | Fedoraproject |
- cpe:2.3:o:westerndigital:my_cloud_dl2100_firmware:*:*:*:*:*:*:*:* Versions before 5.19.117 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_dl2100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_dl4100_firmware:*:*:*:*:*:*:*:* Versions before 5.19.117 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_dl4100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_ex2100_firmware:*:*:*:*:*:*:*:* Versions before 5.19.117 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_ex2100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_firmware:*:*:*:*:*:*:*:* Versions before 5.19.117 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:wd_cloud_firmware:*:*:*:*:*:*:*:* Versions before 5.19.117 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:wd_cloud:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_home_firmware:*:*:*:*:*:*:*:* Versions before 7.16-220 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_home:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:a:netatalk:netatalk:*:*:*:*:*:*:*:* Versions before 3.1.18 Vulnerable ·Netatalk
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* Versions 37 Vulnerable ·Fedoraproject
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* Versions 38 Vulnerable ·Fedoraproject
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* Versions 39 Vulnerable ·Fedoraproject
Remediation
- Fix · CNA My Cloud (Western Digital) Fixed in 5.19.117
- Fix · CNA My Cloud Home (Western Digital) Fixed in 7.16-220
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2022-22995
- 2026-10-03 Alias added: GHSA-wc8x-f5rv-3653
References
More Western Digital vulnerabilities
- TI-2016-08187 Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud… CVSS 3.0CRITICAL 9.8
- TI-2018-12259 It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by… CVSS 3.0CRITICAL 9.8
- TI-2022-12204 Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp CVSS 3.1CRITICAL 9.8
- TI-2016-08186 Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud… CVSS 3.0CRITICAL 9.8
- TI-2018-01067 Memory corruption in Western Digital TV Media Player CVSS 3.0CRITICAL 9.8
- TI-2022-12202 Command Injection Vulnerability in Western Digital My Cloud devices CVSS 3.1CRITICAL 9.8
Sources
- CVE-2022-22995 · CVE Program
- CVE-2022-22995 · NVD
- FIRST EPSS
- GHSA-wc8x-f5rv-3653 · GitHub Advisory Database · CC BY 4.0
- CVE-2022-22995 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences