PT-2022-15761
CVE-2022-22991
·
تاريخ النشر
2022-01-13
·
تاريخ التحديث
2022-01-21
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Western Digital MyCloud PR4100 (affected versions not specified)
Description
A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call. The issue was addressed by disabling checks for internet connectivity using HTTP.
Recommendations
To resolve the issue, disable checks for internet connectivity using HTTP.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾