Uncontrolled Resource Consumption Vulnerability Affects My Cloud Home and My Cloud Home Duo Devices
CVE-2023-22819

4.9MEDIUM

Key Information:

Vendor

Western Digital

Status
My Cloud Os 5
My Cloud Home & Duo
Ibi
Vendor
CVE Published:
5 February 2024

What is CVE-2023-22819?

A vulnerability has been identified in specific Western Digital My Cloud devices that enables an attacker with root privileges to exploit uncontrolled resource consumption. This scenario arises when an attacker sends specially crafted requests to the affected services, leading to excessive memory utilization. The continuous allocation of resources may eventually cause the affected service to terminate unexpectedly and restart, impacting availability. Mitigation requires updating to the latest firmware versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

ibi Linux 0 < 9.5.1-104

My Cloud Home & Duo Linux 0 < 9.5.1-104

My Cloud OS 5 Linux 0 < 5.27.161

References

https://www.westerndigital.com/support/product-security/w...

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sam Thomas (@_s_n_t) of Pentest Ltd (@pentestltd) working with Trend Micro’s Zero Day Initiative
JSON
.