CVE-2023-22819

An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being stopped and restarted was discovered in Western Digital My Cloud Home, My Cloud Home Duo, SanDisk ibi and Western Digital My Cloud OS 5 devices. This issue requires the attacker to already have root privileges in order to exploit this vulnerability. This issue affects My Cloud Home and My Cloud Home Duo: before 9.5.1-104; ibi: before 9.5.1-104; My Cloud OS 5: before 5.27.161.

• CWE-770
• CWE-400

• https://www.westerndigital.com/support/product-security/wdc-24001-western-digital-my-cloud-os-5-my-cloud-home-duo-and-sandisk-ibi-firmware-updateVendor Advisory
• https://www.westerndigital.com/support/product-security/wdc-24001-western-digital-my-cloud-os-5-my-cloud-home-duo-and-sandisk-ibi-firmware-updateVendor Advisory

Published

Feb 5, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22813 A device API endpoint was missing access controls …4.3
• CVE-2023-22814An authentication bypass issue via spoofing was discovered i…9.8
• CVE-2023-22815Post-authentication remote command injection vulnerability i…6.7
• CVE-2023-22816A post-authentication remote command injection vulnerability…8.8
• CVE-2023-22817Server-side request forgery (SSRF) vulnerability that could …5.5
• CVE-2023-22818Multiple DLL Search Order Hijack vulnerabilities were addres…7.8
• CVE-2023-2282Improper access control in the Web Login listener in Devolut…6.5
• CVE-2023-2283A vulnerability was found in libssh, where the authenticatio…6.5
• CVE-2023-22832The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 thr…7.5
• CVE-2023-22833Palantir Foundry deployments running Lime2 versions between …6.5
• CVE-2023-22834The Contour Service was not checking that users had permissi…4.3
• CVE-2023-22835A security defect was identified that enabled a user of Foun…7.7