CVE-2023-22814: Authentication Bypass issue in My Cloud OS 5 devices
Published Jun 30, 2023
·Updated
An authentication bypass issue via spoofing was discovered in the token-based authentication mechanism that could allow an attacker to carry out an impersonation attack.
This issue affects My Cloud OS 5 devices: before 5.26.202.
Affected Software
11 affected components
WesternDigital My Cloud Os>=5.02.104<5.26.202
WesternDigital My Cloud
WesternDigital My Cloud Dl2100
WesternDigital My Cloud Dl4100
WesternDigital My Cloud Ex2 Ultra
WesternDigital My Cloud Ex2100
WesternDigital My Cloud Ex4100
WesternDigital My Cloud Mirror G2
WesternDigital My Cloud Pr2100
WesternDigital My Cloud Pr4100
WesternDigital Wd Cloud
Remediation
Information
Western Digital recommends that users promptly update their devices to the latest firmware by clicking on the firmware update notification.
Event History
Jun 30, 2023
CVE Published
via MITRE·11:05 PM
Data Sourced
via MITRE·11:05 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-22814?
CVE-2023-22814 is an authentication bypass issue via spoofing in the token-based authentication mechanism of My Cloud OS 5 devices before 5.26.202.
2
How does CVE-2023-22814 affect My Cloud OS devices?
CVE-2023-22814 affects My Cloud OS 5 devices before version 5.26.202.
3
What is the severity of CVE-2023-22814?
The severity of CVE-2023-22814 is critical.
4
How can an attacker exploit CVE-2023-22814?
An attacker can exploit CVE-2023-22814 by carrying out an impersonation attack through the authentication bypass issue.
5
How can I fix CVE-2023-22814?
To fix CVE-2023-22814, update your My Cloud OS 5 device to version 5.26.202 or later.