Western Digital Product Security Update Advisory (CVE-2024-22170)

Overview

 

An update has been released to address vulnerabilities in Western Digital Products. Users of the affected versions are advised to update to the latest version.

 

Affected Products

CVE-2024-22170

  • My Cloud OS 5 Firmware versions: ~ 5.29.102 (excluded)
     

 

 

Resolved Vulnerabilities

 

Improperly restricting operations within a memory buffer in Western Digital My Cloud (CVE-2024-22170)

 

Vulnerability Patches

The following product-specific Vulnerability Patches have been made available with the latest update. If you are using an affected version, Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2024-22170

  • My Cloud OS 5 Firmware version: 5.29.102

     

Referenced Sites

 

[1] CVE-2024-22170 Detail

https://nvd.nist.gov/vuln/detail/CVE-2024-22170

[2] Western Digital My Cloud OS 5 Firmware 5.29.102

https://www.westerndigital.com/support/product-security/wdc-24005-western-digital-my-cloud-os-5-firmware-5-29-102