CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-22999

Western Digital My Cloud devices are vulnerable to a cross side scripting vulnerability that can allow a malicious user with elevated privileges access to drives being backed up to construct and inject JavaScript payloads into an authenticated user's browser. As a result, it may be possible to gain control over the authenticated session, steal data, modify settings, or redirect the user to malicious websites. The scope of impact can extend to other components.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 58.7%

CVSS Severity

CVSS v3 Score 8.2

References

Products affected by CVE-2022-22999

Westerndigital » My Cloud Dl2100 » Version: N/A

cpe:2.3:h:westerndigital:my_cloud_dl2100:-
Westerndigital » My Cloud Dl4100 » Version: N/A

cpe:2.3:h:westerndigital:my_cloud_dl4100:-
Westerndigital » My Cloud Ex2100 » Version: N/A

cpe:2.3:h:westerndigital:my_cloud_ex2100:-
Westerndigital » My Cloud Ex2 Ultra » Version: N/A

cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-
Westerndigital » My Cloud Ex4100 » Version: N/A

cpe:2.3:h:westerndigital:my_cloud_ex4100:-
Westerndigital » My Cloud Mirror G2 » Version: N/A

cpe:2.3:h:westerndigital:my_cloud_mirror_g2:-
Westerndigital » My Cloud Pr2100 » Version: N/A

cpe:2.3:h:westerndigital:my_cloud_pr2100:-
Westerndigital » My Cloud Pr4100 » Version: N/A

cpe:2.3:h:westerndigital:my_cloud_pr4100:-
Westerndigital » My Cloud Dl2100 Firmware » Version: N/A

cpe:2.3:o:westerndigital:my_cloud_dl2100_firmware:-
Westerndigital » My Cloud Dl2100 Firmware » Version: 2.31.149

cpe:2.3:o:westerndigital:my_cloud_dl2100_firmware:2.31.149
Westerndigital » My Cloud Dl2100 Firmware » Version: 2.31.163

cpe:2.3:o:westerndigital:my_cloud_dl2100_firmware:2.31.163
Westerndigital » My Cloud Dl2100 Firmware » Version: 2.31.174

cpe:2.3:o:westerndigital:my_cloud_dl2100_firmware:2.31.174
Westerndigital » My Cloud Dl2100 Firmware » Version: 2.31.183

cpe:2.3:o:westerndigital:my_cloud_dl2100_firmware:2.31.183
Westerndigital » My Cloud Dl4100 Firmware » Version: N/A

cpe:2.3:o:westerndigital:my_cloud_dl4100_firmware:-
Westerndigital » My Cloud Dl4100 Firmware » Version: 2.31.149

cpe:2.3:o:westerndigital:my_cloud_dl4100_firmware:2.31.149
Westerndigital » My Cloud Dl4100 Firmware » Version: 2.31.163

cpe:2.3:o:westerndigital:my_cloud_dl4100_firmware:2.31.163
Westerndigital » My Cloud Dl4100 Firmware » Version: 2.31.174

cpe:2.3:o:westerndigital:my_cloud_dl4100_firmware:2.31.174
Westerndigital » My Cloud Dl4100 Firmware » Version: 2.31.183

cpe:2.3:o:westerndigital:my_cloud_dl4100_firmware:2.31.183
Westerndigital » My Cloud Ex2100 Firmware » Version: N/A

cpe:2.3:o:westerndigital:my_cloud_ex2100_firmware:-
Westerndigital » My Cloud Ex2100 Firmware » Version: 2.31.149

cpe:2.3:o:westerndigital:my_cloud_ex2100_firmware:2.31.149
Westerndigital » My Cloud Ex2100 Firmware » Version: 2.31.163

cpe:2.3:o:westerndigital:my_cloud_ex2100_firmware:2.31.163
Westerndigital » My Cloud Ex2100 Firmware » Version: 2.31.174

cpe:2.3:o:westerndigital:my_cloud_ex2100_firmware:2.31.174
Westerndigital » My Cloud Ex2100 Firmware » Version: 2.31.183

cpe:2.3:o:westerndigital:my_cloud_ex2100_firmware:2.31.183
Westerndigital » My Cloud Ex2 Ultra Firmware » Version: N/A

cpe:2.3:o:westerndigital:my_cloud_ex2_ultra_firmware:-
Westerndigital » My Cloud Ex2 Ultra Firmware » Version: 2.31.149

cpe:2.3:o:westerndigital:my_cloud_ex2_ultra_firmware:2.31.149
Westerndigital » My Cloud Ex2 Ultra Firmware » Version: 2.31.163

cpe:2.3:o:westerndigital:my_cloud_ex2_ultra_firmware:2.31.163
Westerndigital » My Cloud Ex2 Ultra Firmware » Version: 2.31.174

cpe:2.3:o:westerndigital:my_cloud_ex2_ultra_firmware:2.31.174
Westerndigital » My Cloud Ex2 Ultra Firmware » Version: 2.31.183

cpe:2.3:o:westerndigital:my_cloud_ex2_ultra_firmware:2.31.183
Westerndigital » My Cloud Ex4100 Firmware » Version: N/A

cpe:2.3:o:westerndigital:my_cloud_ex4100_firmware:-
Westerndigital » My Cloud Ex4100 Firmware » Version: 2.31.149

cpe:2.3:o:westerndigital:my_cloud_ex4100_firmware:2.31.149
Westerndigital » My Cloud Ex4100 Firmware » Version: 2.31.163

cpe:2.3:o:westerndigital:my_cloud_ex4100_firmware:2.31.163
Westerndigital » My Cloud Ex4100 Firmware » Version: 2.31.174

cpe:2.3:o:westerndigital:my_cloud_ex4100_firmware:2.31.174
Westerndigital » My Cloud Ex4100 Firmware » Version: 2.31.183

cpe:2.3:o:westerndigital:my_cloud_ex4100_firmware:2.31.183
Westerndigital » My Cloud Mirror G2 Firmware » Version: N/A

cpe:2.3:o:westerndigital:my_cloud_mirror_g2_firmware:-
Westerndigital » My Cloud Pr2100 Firmware » Version: N/A

cpe:2.3:o:westerndigital:my_cloud_pr2100_firmware:-
Westerndigital » My Cloud Pr2100 Firmware » Version: 2.31.149

cpe:2.3:o:westerndigital:my_cloud_pr2100_firmware:2.31.149
Westerndigital » My Cloud Pr2100 Firmware » Version: 2.31.163

cpe:2.3:o:westerndigital:my_cloud_pr2100_firmware:2.31.163
Westerndigital » My Cloud Pr2100 Firmware » Version: 2.31.174

cpe:2.3:o:westerndigital:my_cloud_pr2100_firmware:2.31.174
Westerndigital » My Cloud Pr2100 Firmware » Version: 2.31.183

cpe:2.3:o:westerndigital:my_cloud_pr2100_firmware:2.31.183
Westerndigital » My Cloud Pr4100 Firmware » Version: N/A

cpe:2.3:o:westerndigital:my_cloud_pr4100_firmware:-
Westerndigital » My Cloud Pr4100 Firmware » Version: 2.30.172

cpe:2.3:o:westerndigital:my_cloud_pr4100_firmware:2.30.172
Westerndigital » My Cloud Pr4100 Firmware » Version: 2.31.149

cpe:2.3:o:westerndigital:my_cloud_pr4100_firmware:2.31.149
Westerndigital » My Cloud Pr4100 Firmware » Version: 2.31.163

cpe:2.3:o:westerndigital:my_cloud_pr4100_firmware:2.31.163
Westerndigital » My Cloud Pr4100 Firmware » Version: 2.31.174

cpe:2.3:o:westerndigital:my_cloud_pr4100_firmware:2.31.174
Westerndigital » My Cloud Pr4100 Firmware » Version: 2.31.183

cpe:2.3:o:westerndigital:my_cloud_pr4100_firmware:2.31.183

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-22999

Products

Pricing

Contact Us