VULNERABILITY INTELLIGENCE

CVE-2022-29840

CVSS score5.5 MEDIUM

EPSS probability0.13%

CISA KEVNot currently listed

Published2023-05-10

Last modified2026-06-17

Description

Server-Side Request Forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL to point back to the loopback adapter was addressed in Western Digital My Cloud OS 5 devices. This could allow the URL to exploit other vulnerabilities on the local server.This iss…