[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNUxUTTRr9PwQPj70pihuqFlUuqGU_7XpEvUEtV9yd5M":3,"g5a-risk:CVE-2022-22994":175},{"success":4,"data":5,"meta":173},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":87,"references":88,"referencesCount":101,"weaknesses":102,"weaknessesCount":111,"isActivelyExploited":112,"cisaInfo":27,"otxData":27,"relatedBlogPosts":113,"seoMetadata":114,"configurations":139,"relatedVendorCves":171,"notableEvents":172},"CVE-2022-22994","What is CVE-2022-22994?","A remote code execution vulnerability was discovered on Western Digital My Cloud devices where an attacker could trick a NAS device into loading through an unsecured HTTP call. This was a result insufficient verification of calls to the device. The vulnerability was addressed by disabling checks for internet connectivity using HTTP.","A remote code execution vulnerability was discovered on Western Digital My Cloud devices where an attacker could trick a NAS device into loading through an u...","2022-01-28T20:15:12.813","2022-03-15T16:37:34.82",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":38,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":29},"psirt@wdc.com","Secondary",{"Version":20,"VectorString":34,"AttackVector":35,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":36,"BaseSeverity":25,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","ADJACENT_NETWORK",8.8,2.8,[39],{"Source":17,"Type":18,"CVSSData":40,"BaseSeverity":25,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":41,"VectorString":42,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.01853,[47,47,47,47,47,47,47],"Critical",[51,56,60,63,66,69,72,75,78,81,84],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"westerndigital","my_cloud_os","*","cpe:2.3:o:westerndigital:my_cloud_os:*:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":58,"criteria":59,"vulnerable":4},"my_cloud","-","cpe:2.3:h:westerndigital:my_cloud:-:*:*:*:-:*:*:*",{"vendor":52,"product":61,"version":58,"criteria":62,"vulnerable":4},"my_cloud_dl2100","cpe:2.3:h:westerndigital:my_cloud_dl2100:-:*:*:*:*:*:*:*",{"vendor":52,"product":64,"version":58,"criteria":65,"vulnerable":4},"my_cloud_dl4100","cpe:2.3:h:westerndigital:my_cloud_dl4100:-:*:*:*:*:*:*:*",{"vendor":52,"product":67,"version":58,"criteria":68,"vulnerable":4},"my_cloud_ex2_ultra","cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-:*:*:*:*:*:*:*",{"vendor":52,"product":70,"version":58,"criteria":71,"vulnerable":4},"my_cloud_ex2100","cpe:2.3:h:westerndigital:my_cloud_ex2100:-:*:*:*:*:*:*:*",{"vendor":52,"product":73,"version":58,"criteria":74,"vulnerable":4},"my_cloud_ex4100","cpe:2.3:h:westerndigital:my_cloud_ex4100:-:*:*:*:*:*:*:*",{"vendor":52,"product":76,"version":58,"criteria":77,"vulnerable":4},"my_cloud_mirror_gen_2","cpe:2.3:h:westerndigital:my_cloud_mirror_gen_2:-:*:*:*:*:*:*:*",{"vendor":52,"product":79,"version":58,"criteria":80,"vulnerable":4},"my_cloud_pr2100","cpe:2.3:h:westerndigital:my_cloud_pr2100:-:*:*:*:*:*:*:*",{"vendor":52,"product":82,"version":58,"criteria":83,"vulnerable":4},"my_cloud_pr4100","cpe:2.3:h:westerndigital:my_cloud_pr4100:-:*:*:*:*:*:*:*",{"vendor":52,"product":85,"version":58,"criteria":86,"vulnerable":4},"wd_cloud","cpe:2.3:h:westerndigital:wd_cloud:-:*:*:*:*:*:*:*",11,[89,95],{"url":90,"source":91,"tags":92},"https:\u002F\u002Fwww.westerndigital.com\u002Fsupport\u002Fproduct-security\u002Fwdc-22002-my-cloud-os5-firmware-5-19-117","Westerndigital",[93,94],"Release Notes","Vendor Advisory",{"url":96,"source":97,"tags":98},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-22-349\u002F","Zerodayinitiative",[99,100],"Third Party Advisory","VDB Entry",2,[103],{"id":104,"name":105,"description":106,"extendedDescription":107,"status":108,"abstraction":109,"structure":110},"CWE-345","Insufficient Verification of Data Authenticity","The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.","","Draft","Class","Simple",1,false,[],{"title":115,"metaDescription":116,"keywords":117,"canonicalUrl":118,"structuredData":119},"What is CVE-2022-22994? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-22994, a critical severity cyber security vulnerability from 2022. A remote code execution vulnerability was discovered on...","CVE-2022-22994, CVE-2022-22994 vulnerability, CVE-2022-22994 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, westerndigital security, my_cloud_os vulnerability, my_cloud vulnerability, my_cloud_dl2100 vulnerability, my_cloud_dl4100 vulnerability, my_cloud_ex2_ultra vulnerability","\u002Fwhat-is\u002Fcve-2022-22994",{"@context":120,"@type":121,"headline":115,"description":116,"datePublished":10,"dateModified":11,"author":122,"publisher":126,"about":130,"mainEntityOfPage":134,"articleSection":137,"keywords":138},"https:\u002F\u002Fschema.org","TechArticle",{"@type":123,"name":124,"url":125},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":123,"name":124,"url":125,"logo":127},{"@type":128,"url":129},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":131,"name":6,"description":132,"additionalType":133},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":135,"@id":136},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-22994","Cybersecurity","CVE-2022-22994, CVE-2022-22994 vulnerability, CVE-2022-22994 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[140],{"Operator":141,"Negate":27,"Nodes":142},"AND",[143,149],{"Operator":144,"Negate":27,"CPEMatch":145},"OR",[146],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":147,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":148,"VersionEndIncluding":27},"9B585AE9-1F28-42D7-B16D-75BF1CB8A054","5.19.117",{"Operator":144,"Negate":27,"CPEMatch":150},[151,153,155,157,159,161,163,165,167,169],{"Vulnerable":27,"Criteria":59,"MatchCriteriaID":152,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F597DB20-7E49-4234-AB58-B944E6D3F9EA",{"Vulnerable":27,"Criteria":62,"MatchCriteriaID":154,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9E783EBC-7608-4527-B1AD-9B4E7A7A108C",{"Vulnerable":27,"Criteria":65,"MatchCriteriaID":156,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F3034F4A-239C-4E38-9BD6-217361A7C519",{"Vulnerable":27,"Criteria":68,"MatchCriteriaID":158,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5A581EBA-A1F2-4ABC-8183-29973A46FA43",{"Vulnerable":27,"Criteria":71,"MatchCriteriaID":160,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"ABBBDC1E-2320-4767-B669-1BB2FFB1E1C4",{"Vulnerable":27,"Criteria":74,"MatchCriteriaID":162,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B78030F0-6655-4604-9D16-2FA1F3FD52FF",{"Vulnerable":27,"Criteria":77,"MatchCriteriaID":164,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5695E842-1561-4A4F-901F-6EC07F558989",{"Vulnerable":27,"Criteria":80,"MatchCriteriaID":166,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BF58260B-2131-402C-A9DA-67B188136DE1",{"Vulnerable":27,"Criteria":83,"MatchCriteriaID":168,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CB0C2FD9-4792-4DA2-9698-E53109A499EC",{"Vulnerable":27,"Criteria":86,"MatchCriteriaID":170,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8FDE0337-4329-4CE3-9B0B-61BE8361E910",[],[],{"lastModified":11,"cacheTime":174,"version":41},1792266682705,{"score":176,"band":177,"action":178,"scoredAt":179},55,"Medium","Plan remediation","2026-10-16T06:53:17.511711+00:00"]