Western Digital My Cloud Home and SanDisk ibi Firmware Versions 8.10.0-117 and Higher
WDC Tracking Number: WDC-22015
Product Line: WD My Cloud Home, WD My Cloud Home Duo and SanDisk ibi
Published: September 21, 2022
Last Updated: September 23, 2022
Description
Western Digital My Cloud Home and SanDisk ibi firmware versions 8.10.0-117 and higher include updates to help improve the security of your devices.
Your My Cloud Home and ibi device will be automatically updated to reflect the latest firmware version.
For more information on the latest security updates, see the release notes.
Advisory Summary
A buffer overflow vulnerability was addressed in a binary file that could allow an attacker to overrun a buffer’s boundary and overwrite adjacent memory which may result in erratic program behavior, including memory access errors, incorrect results, a crash, or exposure of information. This vulnerability can only be exploited by chaining it with another vulnerability.
CVE Number: CVE-2022-23006
Addressed a denial-of-service vulnerability that that could allow an attacker to interrupt the execution flow and pause the device upgrade. This vulnerability can only be exploited by chaining it with another vulnerability.
CVE Number: CVE-2022-23007