High severity7.8NVD Advisory· Published Jan 28, 2022· Updated Jun 17, 2026

CVE-2022-22992

Description

A command injection remote code execution vulnerability was discovered on Western Digital My Cloud Devices that could allow an attacker to execute arbitrary system commands on the device. The vulnerability was addressed by escaping individual arguments to shell functions coming from user input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Westerndigital/My Cloud OS
cpe:2.3:o:westerndigital:my_cloud_os:*:*:*:*:*:*:*:*
Range: <5.19.117
Western Digital/My Cloud Devicesdescription
Westerndigital/My Cloud Devicesllm-create
Westerndigital/My Cloud OS 5llm-fuzzy
Range: 5.19.117

Patches

Vulnerability mechanics

References

www.westerndigital.com/support/product-security/wdc-22002-my-cloud-os5-firmware-5-19-117nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000