{"id":"CVE-2022-36331","url":"https://www.cyber-defence.io/tools/cve/CVE-2022-36331","generatedAt":"2026-10-27T17:30:10.870Z","title":"Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attack that could allow an unauthenticated attacker to gain access to user data.","description":"Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attack that could allow an unauthenticated attacker to gain access to user data.\nThis issue affects My Cloud OS 5 devices: before 5.25.132; My Cloud Home and My Cloud Home Duo: before 8.13.1-102; SanDisk ibi: before 8.13.1-102.\n\n","published":"2023-06-12T18:15:10.000Z","lastModified":"2026-06-17T04:53:16.000Z","status":"Modified","sourceIdentifier":"psirt@wdc.com","cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-290"],"affected":["westerndigital/my cloud pr2100 firmware","westerndigital/my cloud pr4100 firmware","westerndigital/my cloud ex4100 firmware","westerndigital/my cloud ex2 ultra firmware","westerndigital/my cloud mirror g2 firmware","westerndigital/my cloud dl2100 firmware","westerndigital/my cloud dl4100 firmware","westerndigital/my cloud ex2100 firmware","westerndigital/my cloud home firmware","westerndigital/my cloud home duo firmware","westerndigital/sandisk ibi firmware","westerndigital/my cloud firmware"],"epss":{"score":0.00591,"percentile":0.47983,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.59%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://https://www.westerndigital.com/support/product-security/wdc-22020-my-cloud-os-5-my-cloud-home-ibi-firmware-update","tags":["Broken Link"],"source":"psirt@wdc.com"},{"url":"https://www.westerndigital.com/support/product-security/wdc-22020-my-cloud-os-5-my-cloud-home-ibi-firmware-update","tags":["Vendor Advisory"],"source":"nvd@nist.gov"},{"url":"https://https://www.westerndigital.com/support/product-security/wdc-22020-my-cloud-os-5-my-cloud-home-ibi-firmware-update","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-36331","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}