Support Product Security

Western Digital My Cloud Home and SanDisk ibi Firmware Versions 8.10.0-117 and Higher

WDC Tracking Number: WDC-22015
Product Line: WD My Cloud Home, WD My Cloud Home Duo and SanDisk ibi
Published: September 21, 2022

Last Updated: September 23, 2022

Description

Western Digital My Cloud Home and SanDisk ibi firmware versions 8.10.0-117 and higher include updates to help improve the security of your devices.

Your My Cloud Home and ibi device will be automatically updated to reflect the latest firmware version.

Product Impact
Minimum Fix Version
Last Updated
My Cloud Home
8.10.0-117
September 21, 2022
My Cloud Home Duo
8.10.0-117
September 21, 2022
SanDisk ibi
8.10.0-117
September 21, 2022

For more information on the latest security updates, see the release notes.

Advisory Summary

A buffer overflow vulnerability was addressed in a binary file that could allow an attacker to overrun a buffer’s boundary and overwrite adjacent memory which may result in erratic program behavior, including memory access errors, incorrect results, a crash, or exposure of information. This vulnerability can only be exploited by chaining it with another vulnerability.

CVE Number: CVE-2022-23006

Addressed a denial-of-service vulnerability that that could allow an attacker to interrupt the execution flow and pause the device upgrade. This vulnerability can only be exploited by chaining it with another vulnerability.

CVE Number: CVE-2022-23007