Buffer overflow in Western Digital My Cloud
CVE-2024-22170
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Western Digital My Cloud ddns-start on Linux allows Overflow Buffers.This issue affects My Cloud: before 5.29.102.
Vulnerability class: Buffer Overflow
EPSS: 0.005 (38.0th percentile) — read the EPSS interpretation.
Affected products
- Western Digital My Cloud — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- psirt@wdc.com (vendor-advisory)
Frequently asked questions
- What is CVE-2024-22170?
- CVE-2024-22170 is a vulnerability in Western Digital My Cloud, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2024-09-27.
- Is CVE-2024-22170 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.