CVE-2023-22819

Summary

CVE-2023-22819 is an uncontrolled resource consumption vulnerability that affects Western Digital My Cloud Home, My Cloud Home Duo, SanDisk ibi, and Western Digital My Cloud OS 5 devices. This vulnerability can be exploited by sending crafted requests to the affected services, causing a significant consumption of memory and ultimately leading to the service being stopped and restarted. However, it is important to note that the attacker must already have root privileges to exploit this vulnerability. To remediate this issue, users should update their devices to the following versions: My Cloud Home and My Cloud Home Duo - version 9.5.1-104 or later; ibi - version 9.5.1-104 or later; My Cloud OS 5 - version 5.27.161 or later. The potential danger posed by this vulnerability is relatively high as it can result in service disruption and potentially allow an attacker with root privileges to gain further access or control over the affected devices.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.