VULNERABILITY INTELLIGENCE

CVE-2022-29837

CVSS score4.7 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2022-12-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which could allow an attacker to initiate installation of custom ZIP packages and overwrite system files. This could potentially lead to a code execution.

Weakness classification

  • psirt@wdc.com: CWE-22
  • nvd@nist.gov: CWE-22

Primary references