Support Product Security

Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Firmware Version 9.4.1-101

WDC Tracking Number: WDC-23008
Product Line: My Cloud Home, My Cloud Home Duo, and SanDisk ibi
Published: May 25, 2023

Last Updated: May 25, 2023

Description

Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi firmware versions 9.4.1-101 and higher include updates to help improve the security of your devices.

Your devices will be automatically updated to reflect the latest firmware version.

Product Impact
Minimum Fix Version
Last Updated
My Cloud Home
9.4.1-101
May 25, 2023
My Cloud Home Duo
9.4.1-101
May 25, 2023
SanDisk ibi
9.4.1-101
May 25, 2023

For more information on the latest security updates, see the release notes.

Advisory Summary

Addressed a server-side request forgery vulnerability that could allow a rogue server on the local network to modify its URL to point back to the loopback adapter. This could allow the URL to exploit other vulnerabilities on the local server.

CVE Number: CVE-2022-29840

Reported By: Sam Thomas (@_s_n_t) of Pentest Ltd (@pentestltd) working with Trend Micro’s Zero Day Initiative