Support Product Security

Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Firmware Versions 9.5.0-186

WDC Tracking Number: WDC-23011
Product Line: WD My Cloud Home, WD My Cloud Home Duo and SanDisk ibi
Published: August 8, 2023

Last Updated: August 8, 2023

Description

Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi firmware versions 9.5.0-186 and higher include updates to help improve the security of your devices.

Your devices will be automatically updated to reflect the latest firmware version.

Product Impact
Minimum Fix Version
Last Updated
My Cloud Home
9.5.0-186
August 8, 2023
My Cloud Home Duo
9.5.0-186
August 8, 2023
SanDisk ibi
9.5.0-186
August 8, 2023

For more information on the latest security updates, see the release notes.

Advisory Summary

Addressed multiple issues in ffmpeg - tools for transcoding, streaming and playing of multimedia files. These issues can lead to denial-of-service attacks.

CVE Number: CVE-2020-22041, CVE-2020-22044, CVE-2020-22046, CVE-2020-22048, CVE-2020-20451

Updated open-source curl package to version 7.74.0-1.3+deb11u3 to resolve a vulnerability that could allow an attacker to obtain sensitive information or leak credentials to third-party hosts.

CVE Number: CVE-2022-27774

Updated open-source openssl package to version 1.1.1n-0+deb11u5 to resolve multiple vulnerabilities that could allow denial of service attacks, improper certificate validation, or inadequate encryption issues.

CVE Number: CVE-2023-0464, CVE-2023-0465, CVE-2023-0466, CVE-2023-2650, CVE-2022-4450, CVE-2023-0286, CVE-2023-0215, CVE-2022-4304, CVE-2022-2097

Updated open-source containerd package to version 1.4.13~ds1-1~deb11u4 to resolve multiple vulnerabilities that could allow denial of service attacks, information disclosure, or memory leak issues.

CVE Number: CVE-2023-25153, CVE-2023-25173, CVE-2022-23471