CVE-2022-22991
published 2022-01-13CVE-2022-22991: A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP…
PriorityP349high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
EPSS
1.33%
67.6th percentile
A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call. Addressed this vulnerability by disabling checks for internet connectivity using HTTP.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| western_digital | my_cloud | >= My Cloud OS 5 < 5.19.117 | 5.19.117 |
| westerndigital | my_cloud_os | < 5.19.117 | 5.19.117 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.08.3HIGHAV:A/AC:L/Au:N/C:C/I:C/A:C
cisa9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5pf6-pvrw-qjr7: A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured
ghsa_unreviewed·2022-01-14
CVE-2022-22991 [HIGH] CWE-77 GHSA-5pf6-pvrw-qjr7: A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured
A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call. Addressed this vulnerability by disabling checks for internet connectivity using HTTP.
CISA
F5 BIG-IP Traffic Management Microkernel Buffer Overflow
cisa·2022-01-18·CVSS 9.8
CVE-2021-22991 [CRITICAL] CWE-119 F5 BIG-IP Traffic Management Microkernel Buffer Overflow
Vulnerability: F5 BIG-IP Traffic Management Microkernel Buffer Overflow
Affected: F5 BIG-IP Traffic Management Microkernel
The Traffic Management Microkernel of BIG-IP ASM Risk Engine has a buffer overflow vulnerability, leading to a bypassing of URL-based access controls.
Required Action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2021-22991
Remediation Due Date: 2022-02-01
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://www.westerndigital.com/support/product-security/wdc-22002-my-cloud-os5-firmware-5-19-117https://www.zerodayinitiative.com/advisories/ZDI-22-077/https://www.westerndigital.com/support/product-security/wdc-22002-my-cloud-os5-firmware-5-19-117https://www.zerodayinitiative.com/advisories/ZDI-22-077/
2022-01-13
Published