Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
Priority LOW 24CWE-918Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
Server-side request forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL using another DNS address to point back to the loopback adapter. This could then allow the URL to exploit other vulnerabilities on the local server. This was addressed by fixing DNS addresses that refer to loopback. This issue affects My Cloud OS 5 devices before 5.27.161, My Cloud Home, My Cloud Home Duo and SanDisk ibi devices before 9.5.1-104.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00241 15th percentileScored 2026-11-07
Fix Fixed My Cloud OS 5 (Western Digital): 5.27.161My Cloud Home & Duo (Western Digital): 9.5.1-104+1 more product
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Western Digital | My Cloud OS 5 | before 5.27.161 | 5.27.161 | Patch available | CNA |
| Western Digital | My Cloud Home & Duo | before 9.5.1-104 | 9.5.1-104 | Patch available | CNA |
| SanDisk | ibi | before 9.5.1-104 | 9.5.1-104 | Patch available | CNA |
- My Cloud OS 5 VendorWestern Digital Affected before 5.27.161 Fixed in 5.27.161 Patch available CNA
- My Cloud Home & Duo VendorWestern Digital Affected before 9.5.1-104 Fixed in 9.5.1-104 Patch available CNA
- ibi VendorSanDisk Affected before 9.5.1-104 Fixed in 9.5.1-104 Patch available CNA
CPE configurations NVD · 26
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:westerndigital:my_cloud_pr2100_firmware:*:*:*:*:*:*:*:* | before 5.27.161 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_pr2100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_pr4100_firmware:*:*:*:*:*:*:*:* | before 5.27.161 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_pr4100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_ex4100_firmware:*:*:*:*:*:*:*:* | before 5.27.161 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_ex4100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_ex2_ultra_firmware:*:*:*:*:*:*:*:* | before 5.27.161 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_mirror_g2_firmware:*:*:*:*:*:*:*:* | before 5.27.161 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_mirror_g2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
- cpe:2.3:o:westerndigital:my_cloud_pr2100_firmware:*:*:*:*:*:*:*:* Versions before 5.27.161 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_pr2100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_pr4100_firmware:*:*:*:*:*:*:*:* Versions before 5.27.161 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_pr4100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_ex4100_firmware:*:*:*:*:*:*:*:* Versions before 5.27.161 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_ex4100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_ex2_ultra_firmware:*:*:*:*:*:*:*:* Versions before 5.27.161 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_mirror_g2_firmware:*:*:*:*:*:*:*:* Versions before 5.27.161 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_mirror_g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
Show 16 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:westerndigital:my_cloud_dl2100_firmware:*:*:*:*:*:*:*:* | before 5.27.161 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_dl2100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_dl4100_firmware:*:*:*:*:*:*:*:* | before 5.27.161 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_dl4100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_ex2100_firmware:*:*:*:*:*:*:*:* | before 5.27.161 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_ex2100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_glacier_firmware:*:*:*:*:*:*:*:* | before 5.27.161 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_glacier:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:wd_cloud_firmware:*:*:*:*:*:*:*:* | before 5.27.161 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:wd_cloud:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_home_firmware:*:*:*:*:*:*:*:* | before 9.5.1-104 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_home:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:my_cloud_home_duo_firmware:*:*:*:*:*:*:*:* | before 9.5.1-104 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:my_cloud_home_duo:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:sandisk_ibi_firmware:*:*:*:*:*:*:*:* | before 9.5.1-104 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:sandisk_ibi:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
- cpe:2.3:o:westerndigital:my_cloud_dl2100_firmware:*:*:*:*:*:*:*:* Versions before 5.27.161 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_dl2100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_dl4100_firmware:*:*:*:*:*:*:*:* Versions before 5.27.161 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_dl4100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_ex2100_firmware:*:*:*:*:*:*:*:* Versions before 5.27.161 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_ex2100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_glacier_firmware:*:*:*:*:*:*:*:* Versions before 5.27.161 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_glacier:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:wd_cloud_firmware:*:*:*:*:*:*:*:* Versions before 5.27.161 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:wd_cloud:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_home_firmware:*:*:*:*:*:*:*:* Versions before 9.5.1-104 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_home:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:my_cloud_home_duo_firmware:*:*:*:*:*:*:*:* Versions before 9.5.1-104 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:my_cloud_home_duo:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:sandisk_ibi_firmware:*:*:*:*:*:*:*:* Versions before 9.5.1-104 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:sandisk_ibi:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
Remediation
- Fix · CNA My Cloud OS 5 (Western Digital) Fixed in 5.27.161
- Fix · CNA My Cloud Home & Duo (Western Digital) Fixed in 9.5.1-104
- Fix · CNA ibi (SanDisk) Fixed in 9.5.1-104
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Western Digital My Cloud Home & Duo, My Cloud OS 5 5.27.161, 9.5.1-104
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2023-08986 Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi productsPriority LOW 24
- Release ·
SanDisk ibi 9.5.1-104
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2023-08986 Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi productsPriority LOW 24
Timeline
- 2026-10-02 Threatist record created from CVE-2023-22817
- 2026-10-03 Alias added: GHSA-ff78-2q7q-3gpw
References
More Western Digital vulnerabilities
- TI-2016-08187 Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud… CVSS 3.0CRITICAL 9.8
- TI-2018-12259 It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by… CVSS 3.0CRITICAL 9.8
- TI-2022-12204 Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp CVSS 3.1CRITICAL 9.8
- TI-2016-08186 Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud… CVSS 3.0CRITICAL 9.8
- TI-2018-01067 Memory corruption in Western Digital TV Media Player CVSS 3.0CRITICAL 9.8
- TI-2022-12202 Command Injection Vulnerability in Western Digital My Cloud devices CVSS 3.1CRITICAL 9.8
Sources
- CVE-2023-22817 · CVE Program
- CVE-2023-22817 · NVD
- FIRST EPSS
- GHSA-ff78-2q7q-3gpw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences