CVE:CVE-2022-22995
CNNVD:CNNVD-202203-2270
Western Digital My Cloud是美国西部数据（Western Digital）公司的一款个人云存储设备。
Western Digital My Cloud OS 5 存在后置链接漏洞，该漏洞的存在是由于在 SMB 和 AFP 在其默认配置中提供的原语组合中文件上传期间文件验证不足。远程攻击者可以上传恶意文件并在服务器上执行。
solution:Upgrade westerndigital my_cloud_pr2100_firmware to a higher version than 5.19.117,and avoid the version (,5.19.117); Upgrade westerndigital my_cloud_pr4100_firmware to a higher version than 5.19.117,and avoid the version (,5.19.117); Upgrade westerndigital my_cloud_ex4100_firmware to a higher version than 5.19.117,and avoid the version (,5.19.117); Upgrade westerndigital my_cloud_ex2_ultra_firmware to a higher version than 5.19.117,and avoid the version (,5.19.117); Upgrade westerndigital my_cloud_mirror_gen_2_firmware to a higher version than 5.19.117,and avoid the version (,5.19.117); Upgrade westerndigital my_cloud_dl2100_firmware to a higher version than 5.19.117,and avoid the version (,5.19.117); Upgrade westerndigital my_cloud_dl4100_firmware to a higher version than 5.19.117,and avoid the version (,5.19.117); Upgrade westerndigital my_cloud_ex2100_firmware to a higher version than 5.19.117,and avoid the version (,5.19.117); Upgrade westerndigital my_cloud_firmware to a higher version than 5.19.117,and avoid the version (,5.19.117); Upgrade westerndigital wd_cloud_firmware to a higher version than 5.19.117,and avoid the version (,5.19.117); Upgrade westerndigital my_cloud_home_firmware to a higher version than 7.16-220,and avoid the version (,7.16-220)