CVE-2022-22995
Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
- Record
CVE-2022-22995- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L - Weakness
- CWE-59
- Updated
- 2026-11-02
EUVDEUVD-2022-28106
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
- Record
EUVD-2022-28106- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-wc8x-f5rv-3653
The combination of primitives offered by SMB and AFP in their default configuration allows the...
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
- Record
GHSA-wc8x-f5rv-3653- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-59
- Updated
- 2026-11-02
NVD
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
- Record
CVE-2022-22995- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-59
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-22995
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
- Record
ALPINE-CVE-2022-22995- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
- Record
CVE-2022-22995- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVDEBIAN-CVE-2022-22995
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
- Record
DEBIAN-CVE-2022-22995- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVUBUNTU-CVE-2022-22995
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
- Record
UBUNTU-CVE-2022-22995- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2024-0201 No score
Updated netatalk packages fix security vulnerability
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
- Record
MGASA-2024-0201- Updated
- 2026-11-02
OSVSUSE-SU-2023:4084-1 No score
Security update for netatalk
This update for netatalk fixes the following issues:
- CVE-2022-22995: Fixed a flaw where combining primitives offered by SMB and AFP in their default configuration may allow an attacker to achieve arbitrary code execution. (bsc#1197576)
- Record
SUSE-SU-2023:4084-1- Updated
- 2026-11-02
OSVUSN-6786-1 No score
netatalk vulnerabilities
It was discovered that Netatalk did not properly protect an SMB and AFP default configuration. A remote attacker could possibly use this issue to execute arbitrary code.
- Record
USN-6786-1- Updated
- 2026-11-02
Affected products
- netatalk
- western digital my cloud
- western digital my cloud home
- fedoraproject fedora
- westerndigital my cloud dl2100 firmware
- westerndigital my cloud dl4100 firmware
- westerndigital my cloud ex2100 firmware
- westerndigital my cloud ex2 ultra firmware
- westerndigital my cloud ex4100 firmware
- westerndigital my cloud firmware
- westerndigital my cloud home firmware
- westerndigital my cloud mirror gen 2 firmware
Affected packages
| Package | Affected | Fixed |
|---|---|---|
netatalkAlpine:v3.18 |
before 3.1.18-r0 | 3.1.18-r0 |
netatalkAlpine:v3.19 |
before 3.1.18-r0 | 3.1.18-r0 |
netatalkAlpine:v3.20 |
before 3.1.18-r0 | 3.1.18-r0 |
netatalkAlpine:v3.21 |
before 3.1.18-r0 | 3.1.18-r0 |
netatalkAlpine:v3.22 |
before 3.1.18-r0 | 3.1.18-r0 |
netatalkAlpine:v3.23 |
before 3.1.18-r0 | 3.1.18-r0 |
netatalkAlpine:v3.24 |
before 3.1.18-r0 | 3.1.18-r0 |
netatalkDebian:13 |
before 3.1.18~ds-1 | 3.1.18~ds-1 |
netatalkDebian:14 |
before 3.1.18~ds-1 | 3.1.18~ds-1 |
netatalkDebian:10 |
before 3.1.12~ds-3+deb10u5, plus listed versions 3.1.12~ds-33.1.12~ds-3+deb10u13.1.12~ds-3+deb10u23.1.12~ds-3+deb10u33.1.12~ds-3+deb10u4 |
3.1.12~ds-3+deb10u5 |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
netatalkDebian:11 From an advisory covering 4 CVEs |
before 3.1.12~ds-8+deb11u2, plus listed versions 3.1.12~ds-83.1.12~ds-8+deb11u1 |
3.1.12~ds-8+deb11u2 |
netatalkMageia:9 |
before 3.1.14-2.3.mga9 | 3.1.14-2.3.mga9 |
netatalkSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 3.1.0-3.22.1 | 3.1.0-3.22.1 |
netatalkSUSE:Linux Enterprise Workstation Extension 12 SP5 |
before 3.1.0-3.22.1 | 3.1.0-3.22.1 |
netatalkUbuntu:Pro:20.04:LTS |
before 3.1.12~ds-4ubuntu0.20.04.3+esm1, plus listed versions 3.1.12~ds-33.1.12~ds-43.1.12~ds-4ubuntu0.20.04.13.1.12~ds-4ubuntu0.20.04.3 |
3.1.12~ds-4ubuntu0.20.04.3+esm1 |
netatalkUbuntu:Pro:22.04:LTS |
before 3.1.12~ds-9ubuntu0.22.04.3+esm1, plus listed versions 3.1.12~ds-93.1.12~ds-9build13.1.12~ds-9ubuntu0.22.04.13.1.12~ds-9ubuntu0.22.04.3 |
3.1.12~ds-9ubuntu0.22.04.3+esm1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| affected, aliases, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-22995 is a critical vulnerability (CVSS 10.0) in Netatalk, published March 25, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.73%, the 86th percentile. Fixed in netatalk 3.1.18-r0.
References
westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2
security.gentoo.org/glsa/202311-02
lists.debian.org/debian-lts-announce/2024/01/msg00000.html
Show 19 moreShow less
nvd.nist.gov/vuln/detail/CVE-2022-22995
github.com/advisories/GHSA-wc8x-f5rv-3653
security.alpinelinux.org/vuln/CVE-2022-22995
security-tracker.debian.org/tracker/CVE-2022-22995
advisories.mageia.org/MGASA-2024-0201.html
bugs.mageia.org/show_bug.cgi?id=33249
ubuntu.com/security/notices/USN-6786-1
suse.com/support/update/announcement/2023/suse-su-20234084-1
bugzilla.suse.com/1197576
netatalk.sourceforge.io/CVE-2022-22995.php
cve.org/CVERecord?id=CVE-2022-22995