CVE-2022-22988
Insecure file and directory permissions on EdgeRover
- State
- Published
- Severity
- 7.7 High
- Published
- Jan 13, 2022
- Updated
- Aug 3, 2024
- Reserved
- Jan 10, 2022
Description
File and directory permissions have been corrected to prevent unintended users from modifying or accessing resources. It would be more difficult for an authenticated attacker to now traverse through the files and directories. This can only be exploited once an attacker has already found a way to get authenticated access to the device.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.7 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N | WDC PSIRT |
Weaknesses
- CWE-275 Permission Issues
Affected Products
| Product | Versions |
|---|---|
EdgeRoverWestern Digital |
|
EdgeRoverWestern Digital |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.