VULNERABILITY INTELLIGENCE
CVE-2022-36329
CVSS score4.4 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2023-05-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
Description
An improper privilege management issue that could allow an attacker to cause a denial of service over the OTA mechanism was discovered in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices.This issue affects My Cloud Home and My Cloud Home Duo: before 9.4.0-191; ibi: before 9.4.0-191.
Weakness classification
- psirt@wdc.com: CWE-400
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- psirt@wdc.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory