CVE-2022-22995

🎯 CVE-2022-22995 🇪🇺 EUVD

💬 0 Diskussion 📄 .md Alle CVEs anzeigen ✕

CVE-2022-22995 | The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.

Klassifikation & Betroffenheit:

CWE-59 Western Digital My Cloud Home My Cloud Home < 7.16-220My Cloud My Cloud OS 5 < 5.19.117westerndigital my_cloud_pr2100_firmware *westerndigital my_cloud_pr4100_firmware *westerndigital my_cloud_ex4100_firmware *westerndigital my_cloud_ex2_ultra_firmware *westerndigital my_cloud_mirror_gen_2_firmware *westerndigital my_cloud_dl2100_firmware *

Improper Link Resolution Before File Access 🎯 Medium

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

🛡️ Empfohlene Mitigation: Follow the principle of least privilege when assigning access rights to entities in a software system. Denying access to a file can prevent an attacker from replacing that file with a link to a sensitive file. Ensure good compartmentalization in the system to provide protected areas that can be trusted.

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-17 · Using Malicious Files (Very High) CAPEC-35 · Leverage Executable Code in Non-Executab… (Very High) CAPEC-76 · Manipulating Web Input to File System Ca… (Very High) CAPEC-132 · Symlink Attack (High)

🎯 ATT&CK-Techniken (Kill-Chain-Verhalten):

T1574.005 · Hijack Execution Flow: Executable … T1574.010 · Hijack Execution Flow: Services Fi… T1027.006 · Obfuscated Files or Information: H… T1027.009 · Obfuscated Files or Information: E… T1564.009 · Hide Artifacts: Resource Forking T1547.009 · Boot or Logon Autostart Execution:…

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2024-37143 10.0 CVE-2023-22814 10.0 CVE-2022-36331 10.0 CVE-2025-43220 9.8 CVE-2025-24103 9.8

🩹 Patch verfügbar (OSV):

🩹 4be6b7fd47045601e97ad3f180f1164615f25a4d (Commit)

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2022

Veröffentlicht 03/2022

Heute 09.11.

CVSS-Vektor-Analyse: 10.0

AV · Angriffsvektor Netzwerk

AC · Komplexität Gering

PR · Privilegien Keine

UI · Interaktion Keine

S · Scope Verändert

C · Vertraulichkeit Hoch

I · Integrität Hoch

A · Verfügbarkeit Gering

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

CNA-Bewertung (WDC PSIRT): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Veröffentlicht:25.03.2022

Aktualisiert:17.06.2026 04:29

Assigner (CNA):WDC PSIRT

EUVD-ID:EUVD-2022-28106

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-59 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

Tier	CVEs	Anteil
≥90 %	785	0,2 %
≥50 %	3.559	0,9 %
≥10 %	13.139	3,2 %
<10 %	396.072	95,8 %

Tier

CVEs

Anteil

≥90 %

785

0,2 %

≥50 %

3.559

0,9 %

≥10 %

13.139

3,2 %

<10 %

396.072

95,8 %

10.0 CRITICAL

EPSS

2.7%

CVE-2022-22995 🌐 Netzwerk (Remote) 🔓 Keine Authentifizierung nötig

Western Digital

CVE-2022-22995 | The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.

CWE-59 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

vor 4 Jahren ↻ vor 1 Jahr

🛡️ Details ➔

CVE-2022-22995 | The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.

Zero-Day & Vulnerability Intelligence Hub

CVE-2022-22995 | The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.