CVE-2022-23006— Buffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi

Buffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi

A stack-based buffer overflow vulnerability was found on Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi that could allow an attacker accessing the system locally to read information from /etc/version file. This vulnerability can only be exploited by chaining it with another issue. If an attacker is able to carry out a remote code execution attack, they can gain access to the vulnerable file, due to the presence of insecure functions in code. User interaction is required for exploitation. Exploiting the vulnerability could result in exposure of information, ability to modify files, memory access errors, or system crashes.

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N

栈缓冲区溢出

Western Digital My Cloud和SanDisk ibi缓冲区错误漏洞

Western Digital My Cloud等都是美国西部数据（Western Digital）公司的产品。Western Digital My Cloud是一款个人云存储设备。Western Digital My Cloud Home是一款易于使用的个人云存储设备。SanDisk ibi等都是美国SanDisk公司的产品。SanDisk ibi是一个智能照片管理器和媒体存储硬盘。 Western Digital若干产品存在安全漏洞，该漏洞源于基于栈的缓冲区溢出漏洞，该漏洞允许攻击者本地访问系统，从/

N/A

N/A