CVE-2023-22819

CVSS 3.1 Score 4.9 of 10 (medium)

Details

Published Feb 5, 2024
Updated: Feb 13, 2024
CWE ID 400

Summary

CVE-2023-22819 is an uncontrolled resource consumption vulnerability that affects Western Digital My Cloud Home, My Cloud Home Duo, SanDisk ibi, and Western Digital My Cloud OS 5 devices. This vulnerability can be exploited by sending crafted requests to the affected services, causing a significant consumption of memory and ultimately leading to the service being stopped and restarted. However, it is important to note that the attacker must already have root privileges to exploit this vulnerability. To remediate this issue, users should update their devices to the following versions: My Cloud Home and My Cloud Home Duo - version 9.5.1-104 or later; ibi - version 9.5.1-104 or later; My Cloud OS 5 - version 5.27.161 or later. The potential danger posed by this vulnerability is relatively high as it can result in service disruption and potentially allow an attacker with root privileges to gain further access or control over the affected devices.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-22819 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options