Insecure file and directory permissions on EdgeRover
CVE-2022-22988

7.7HIGH

Key Information:

Vendor

Western Digital

Status
Edgerover
Vendor
CVE Published:
13 January 2022

What is CVE-2022-22988?

File and directory permissions have been corrected to prevent unintended users from modifying or accessing resources. It would be more difficult for an authenticated attacker to now traverse through the files and directories. This can only be exploited once an attacker has already found a way to get authenticated access to the device. 

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

EdgeRover Mac EdgeRover Mac Desktop App < 1.5.0-576

EdgeRover Windows EdgeRover Windows Desktop App < 1.5.0-576

References

https://www.westerndigital.com/support/product-security/w...
x_refsource_MISC

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.