CVE-2022-22995

· CRITICALModified

← All CVEs

CVSS v3.1

10.0

EPSS

2.66%

Published

Mar 25, 2022

Modified

Nov 3, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Weaknesses (CWE)

CWE-59CWE-59

Affected Products (26)

westerndigital · my_cloud_pr2100_firmware (up to 5.19.117)vulnerable

westerndigital · my_cloud_pr2100

westerndigital · my_cloud_pr4100_firmware (up to 5.19.117)vulnerable

westerndigital · my_cloud_pr4100

westerndigital · my_cloud_ex4100_firmware (up to 5.19.117)vulnerable

westerndigital · my_cloud_ex4100

westerndigital · my_cloud_ex2_ultra_firmware (up to 5.19.117)vulnerable

westerndigital · my_cloud_ex2_ultra

westerndigital · my_cloud_mirror_gen_2_firmware (up to 5.19.117)vulnerable

westerndigital · my_cloud_mirror_gen_2

westerndigital · my_cloud_dl2100_firmware (up to 5.19.117)vulnerable

westerndigital · my_cloud_dl2100

westerndigital · my_cloud_dl4100_firmware (up to 5.19.117)vulnerable

westerndigital · my_cloud_dl4100

westerndigital · my_cloud_ex2100_firmware (up to 5.19.117)vulnerable

westerndigital · my_cloud_ex2100

westerndigital · my_cloud_firmware (up to 5.19.117)vulnerable

westerndigital · my_cloud

westerndigital · wd_cloud_firmware (up to 5.19.117)vulnerable

westerndigital · wd_cloud

westerndigital · my_cloud_home_firmware (up to 7.16-220)vulnerable

westerndigital · my_cloud_home

netatalk · netatalk (up to 3.1.18)vulnerable

fedoraproject · fedoravulnerable

References (13)

https://lists.debian.org/debian-lts-announce/2024/01/msg00000.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/55ROUJI22SHZX5EM23QAILZHI67EZQKW/

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5CZZLFOTUP3QYHGHSDUNENGSLPJ6KGO/

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2/

Mailing List

https://security.gentoo.org/glsa/202311-02

Issue TrackingThird Party Advisory

https://www.westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities

Vendor Advisory

https://lists.debian.org/debian-lts-announce/2024/01/msg00000.html

https://lists.debian.org/debian-lts-announce/2024/11/msg00026.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/55ROUJI22SHZX5EM23QAILZHI67EZQKW/

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5CZZLFOTUP3QYHGHSDUNENGSLPJ6KGO/

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2/

Mailing List

https://security.gentoo.org/glsa/202311-02

Issue TrackingThird Party Advisory

https://www.westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs