CVE-2023-22819: An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory…

PriorityP425medium4.9CVSS 3.1

AVNACLPRHUINSUCNINAH

EPSS

0.82%

52.7th percentile

An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being stopped and restarted was discovered in Western Digital My Cloud Home, My Cloud Home Duo, SanDisk ibi and Western Digital My Cloud OS 5 devices. This issue requires the attacker to already have root privileges in order to exploit this vulnerability. This issue affects My Cloud Home and My Cloud Home Duo: before 9.5.1-104; ibi: before 9.5.1-104; My Cloud OS 5: before 5.27.161.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
sandisk	ibi	< 9.5.1-104	9.5.1-104
western_digital	my_cloud_home_duo	< 9.5.1-104	9.5.1-104
western_digital	my_cloud_os_5	< 5.27.161	5.27.161
westerndigital	my_cloud_dl2100_firmware	< 5.27.161	5.27.161
westerndigital	my_cloud_dl4100_firmware	< 5.27.161	5.27.161
westerndigital	my_cloud_ex2100_firmware	< 5.27.161	5.27.161
westerndigital	my_cloud_ex2_ultra_firmware	< 5.27.161	5.27.161
westerndigital	my_cloud_ex4100_firmware	< 5.27.161	5.27.161
westerndigital	my_cloud_glacier_firmware	< 5.27.161	5.27.161
westerndigital	my_cloud_home_duo_firmware	< 9.5.1-104	9.5.1-104
westerndigital	my_cloud_home_firmware	< 9.5.1-104	9.5.1-104
westerndigital	my_cloud_mirror_g2_firmware	< 5.27.161	5.27.161
westerndigital	my_cloud_pr4100_firmware	< 5.27.161	5.27.161
westerndigital	sandisk_ibi_firmware	< 9.5.1-104	9.5.1-104
westerndigital	wd_cloud_firmware	< 5.27.161	5.27.161

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.