PT-2022-15758 · Western Digital · My Cloud Os 5

Published 2022-01-13 · Updated 2026-02-24 · CVE-2022-22989

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions My Cloud OS 5

Description The issue concerns a pre-authenticated stack overflow vulnerability on the FTP service. This vulnerability could be exploited by unauthenticated attackers on the network. The problem was addressed by adding defenses against stack overflow issues.

Recommendations For My Cloud OS 5, update the system to include the added defenses against stack overflow issues to resolve the vulnerability.

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2022-22989

Affected Products

My Cloud Os 5

References · 6

• https://osv.dev/vulnerability/CVE-2022-22989 · Vendor Advisory
• https://westerndigital.com/support/product-security/wdc-22002-my-cloud-os5-firmware-5-19-117 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22989 · Security Note
• https://t.me/cibsecurity/35482 · Telegram Post
• https://t.me/cveNotify/153056 · Telegram Post
• https://t.me/cvenotify/25512 · Telegram Post