Skip to content
OpenAdvisories
Medium · 4.7 CVE-2022-29837 EUVD-2022-34155GHSA-xj3g-h9f3-349x

Path traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices

Published Dec 1, 2022 · Updated Apr 24, 2025 · Assigned by WDC PSIRT

Vendor: SanDisk Vendor: Western Digital Product: ibi Product: My Cloud Home

Description

A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which could allow an attacker to initiate installation of custom ZIP packages and overwrite system files. This could potentially lead to a code execution.

Affected products

VendorProductAffectedFixed
Western Digital My Cloud Home My Cloud Home – < 8.12.0-178, My Cloud Home Duo – < 8.12.0-178 8.12.0-178
SanDisk ibi ibi – < 8.12.0-178 8.12.0-178

References