.
Western Digital My Cloud OS 5 Firmware 5.29.102
WDC Tracking Number: WDC-24005
Product Line/Web: My Cloud OS 5
Published: September 26, 2024
Last Updated: August 2, 2024
Description
A vulnerability was addressed in My Cloud firmware which could allow an attacker to execute arbitrary code due to an unchecked buffer in the Dynamic DNS client.
My Cloud OS 5 Firmware 5.29.102 includes updates to help improve the security of your My Cloud OS 5 devices.
Product Impact
Last Updated
My Cloud EX2 Ultra
September 19, 2024
My Cloud EX4100
September 19, 2024
My Cloud PR2100
September 19, 2024
My Cloud PR4100
September 19, 2024
My Cloud
September 19, 2024
My Cloud Mirror G2
September 19, 2024
My Cloud EX2100
September 19, 2024
My Cloud DL2100
September 19, 2024
My Cloud DL4100
September 19, 2024
WD Cloud
September 19, 2024
Advisory Summary
Addressed a previously unchecked buffer vulnerability in the Dynamic DNS client in My Cloud device firmware versions prior to 5.29.102. This could have allowed an attacker to potentially execute arbitrary code.
CVE Number: CVE-2024-22170
Western Digital would like to thank Claroty Research - Team82 - Noam Moshe working with Trend Micro Zero Day Initiative