CVE-2022-22988
High
Description
File and directory permissions have been corrected to prevent unintended users from modifying or accessing resources. It would be more difficult for an authenticated attacker to now traverse through the files and directories. This can only be exploited once an attacker has already found a way to get authenticated access to the device.
SeverityHigh
CVSS7.7
Exploit probability—
ProductWesterndigital Edgerover
PublishedJan 13, 2022
First seenJan 13, 2022
Weakness typeCWE-275CWE-275
How to fix
Update
- westerndigital edgerover1.5.0-576 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| westerndigital edgerover | v < 1.5.0-576 | 1.5.0-576 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.