cve.bz

CVE-2022-22990

8.8 highEPSS 2.1%

High (8.8) in westerndigital my cloud os. EPSS 2.1% chance of exploitation in the next 30 days.

A limited authentication bypass vulnerability was discovered that could allow an attacker to achieve remote code execution and escalate privileges on the My Cloud devices. Addressed this vulnerability by changing access token validation logic and rewriting rule logic on PHP scripts.

Severity

CVSS 3.1

8.8 high
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWEs
CWE-697, CWE-287
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON