PatchTheCVEmy cloud home firmware vulnerabilities and fixes
Recent CVEs affecting my cloud home firmware, with upgrade or downgrade steps. 10 tracked.
Also searched as: mycloudhomefirmware.
my cloud home firmware has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2023-05-18. Highest priority: CVE-2022-22998 (score 47/100).
- CVE-2022-36330 LOW 1.9 UPGRADE UPGRADE A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenti
- CVE-2022-36329 MEDIUM 4.4 UPGRADE UPGRADE An improper privilege management issue that could allow an attacker to cause a denial of service over the OTA
- CVE-2022-36328 MEDIUM 5.8 UPGRADE UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow
- CVE-2022-36327 MEDIUM 5.8 UPGRADE UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow
- CVE-2022-36326 MEDIUM 4.4 UPGRADE UPGRADE An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a ser
- CVE-2022-29837 MEDIUM 4.7 UPGRADE UPGRADE A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk i
- CVE-2022-29836 LOW 1.9 UPGRADE UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability was discovered vi
- CVE-2022-23006 LOW 1.8 UPGRADE UPGRADE A stack-based buffer overflow vulnerability was found on Western Digital My Cloud Home, My Cloud Home Duo, and
- CVE-2022-22998 HIGH 8.0 UPGRADE UPGRADE Implemented protections on AWS credentials that were not properly protected.
- CVE-2022-22997 MEDIUM 6.8 UPGRADE UPGRADE Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an
FAQ
How do I fix my cloud home firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is my cloud home firmware being exploited right now?
None of the tracked my cloud home firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which my cloud home firmware CVE should I patch first?
CVE-2022-22998 currently ranks highest (47/100): Implemented protections on AWS credentials that were not properly protected..