7.5
CVSSv2

CVE-2022-22995

Published: 25/03/2022 Updated: 04/01/2024
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

westerndigital my_cloud_pr2100_firmware

westerndigital my_cloud_pr4100_firmware

westerndigital my_cloud_ex4100_firmware

westerndigital my_cloud_ex2_ultra_firmware

westerndigital my_cloud_mirror_gen_2_firmware

westerndigital my_cloud_dl2100_firmware

westerndigital my_cloud_dl4100_firmware

westerndigital my_cloud_ex2100_firmware

westerndigital my_cloud_firmware

westerndigital wd_cloud_firmware

westerndigital my_cloud_home_firmware

fedoraproject fedora 37

fedoraproject fedora 38

fedoraproject fedora 39

netatalk netatalk

Vendor Advisories

Debian Bug report logs - #1053545 CVE-2022-22995: netatalk afpd vulnerable to symlink spoofing Package: netatalk; Maintainer for netatalk is Debian Netatalk team <pkg-netatalk-devel@listsaliothdebianorg>; Source for netatalk is src:netatalk (PTS, buildd, popcon) Reported by: Daniel Markstedt <daniel@mindaninet> D ...