Code injection

2023-06-1218:15:00

PRIOn knowledge base

www.prio-n.com

code injection

western digital

sandisk

impersonation attack

user data

vulnerability

my cloud

my cloud home

my cloud os 5

sandisk ibi

nvd

0.001 Low

EPSS

Percentile

44.9%

JSON

Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attack that could allow an unauthenticated attacker to gain access to user data.
This issue affects My Cloud OS 5 devices: before 5.25.132; My Cloud Home and My Cloud Home Duo: before 8.13.1-102; SanDisk ibi: before 8.13.1-102.

CPENameOperatorVersion
my_cloud_dl2100_firmwarelt5.25.132
my_cloud_dl4100_firmwarelt5.25.132
my_cloud_ex2100_firmwarelt5.25.132
my_cloud_ex2_ultra_firmwarelt5.25.132
my_cloud_ex4100_firmwarelt5.25.132
my_cloud_firmwarelt5.25.132
my_cloud_home_duo_firmwareeq< 8.13.1-102
my_cloud_home_firmwareeq< 8.13.1-102
my_cloud_mirror_g2_firmwarelt5.25.132
my_cloud_pr2100_firmwarelt5.25.132

Name	Operator	Version
my_cloud_dl2100_firmware	lt	5.25.132
my_cloud_dl4100_firmware	lt	5.25.132
my_cloud_ex2100_firmware	lt	5.25.132
my_cloud_ex2_ultra_firmware	lt	5.25.132
my_cloud_ex4100_firmware	lt	5.25.132
my_cloud_firmware	lt	5.25.132
my_cloud_home_duo_firmware	eq	< 8.13.1-102
my_cloud_home_firmware	eq	< 8.13.1-102
my_cloud_mirror_g2_firmware	lt	5.25.132
my_cloud_pr2100_firmware	lt	5.25.132