CRITICAL🇵🇱 Wersja polska

CVE-2022-22995

CVSS 10.0v3.1pub. 2022-03-25upd. 2025-11-03

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

  • Fedora Project Fedora

    OS
    Fedoraproject
    373839

  • Netatalk

    APP
    Netatalk
    < 3.1.18

  • Westerndigital My Cloud

    HW
    Westerndigital
    all versions

  • Westerndigital My Cloud Dl2100

    HW
    Westerndigital
    all versions

  • Westerndigital My Cloud Dl2100 Firmware

    OS
    Westerndigital
    < 5.19.117

  • Westerndigital My Cloud Dl4100

    HW
    Westerndigital
    all versions

  • Westerndigital My Cloud Dl4100 Firmware

    OS
    Westerndigital
    < 5.19.117

  • Westerndigital My Cloud Ex2100

    HW
    Westerndigital
    all versions

  • Westerndigital My Cloud Ex2100 Firmware

    OS
    Westerndigital
    < 5.19.117

  • Westerndigital My Cloud Ex2 Ultra

    HW
    Westerndigital
    all versions

  • Westerndigital My Cloud Ex2 Ultra Firmware

    OS
    Westerndigital
    < 5.19.117

  • Westerndigital My Cloud Ex4100

    HW
    Westerndigital
    all versions

  • Westerndigital My Cloud Ex4100 Firmware

    OS
    Westerndigital
    < 5.19.117

  • Westerndigital My Cloud Firmware

    OS
    Westerndigital
    < 5.19.117

  • Westerndigital My Cloud Home

    HW
    Westerndigital
    all versions

  • Westerndigital My Cloud Home Firmware

    OS
    Westerndigital
    < 7.16-220

  • Westerndigital My Cloud Mirror Gen 2

    HW
    Westerndigital
    all versions

  • Westerndigital My Cloud Mirror Gen 2 Firmware

    OS
    Westerndigital
    < 5.19.117

  • Westerndigital My Cloud Pr2100

    HW
    Westerndigital
    all versions

  • Westerndigital My Cloud Pr2100 Firmware

    OS
    Westerndigital
    < 5.19.117

  • Westerndigital My Cloud Pr4100

    HW
    Westerndigital
    all versions

  • Westerndigital My Cloud Pr4100 Firmware

    OS
    Westerndigital
    < 5.19.117

  • Westerndigital Wd Cloud

    HW
    Westerndigital
    all versions

  • Westerndigital Wd Cloud Firmware

    OS
    Westerndigital
    < 5.19.117
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2024-4577CRITICAL9.8⚠ KEVPL ✓same product

PHP CGI argument injection – RCE na Windows przez mechanizm Best-Fit

CVE-2024-5274CRITICAL9.6⚠ KEVPL ✓same product

Type Confusion w V8 (Google Chrome) — RCE przez spreparowaną stronę HTML

CVE-2024-4947CRITICAL9.6⚠ KEVPL ✓same product

Type Confusion w silniku V8 Chrome — zdalne wykonanie kodu (RCE)

CVE-2024-4671CRITICAL9.6⚠ KEVPL ✓same product

Use-after-free w Google Chrome Visuals umożliwiający ucieczkę z sandbox

CVE-2023-6345CRITICAL9.6⚠ KEVPL ✓same product

Integer overflow w Skia w Google Chrome — sandbox escape