CVE-2022-22993

HIGH · CVSS 7.8 EPSS 0.76%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-01-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-22993

Severity

HIGH

CVSS

7.8

EPSS

0.76%

Original NVD Description

A limited SSRF vulnerability was discovered on Western Digital My Cloud devices that could allow an attacker to impersonate a server and reach any page on the server by bypassing access controls. The vulnerability was addressed by creating a whitelist for valid parameters.