Westerndigital Edgerover vulnerabilities

2 CVEs affecting Westerndigital Edgerover, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-22988, published 2022-01-13.

More from Westerndigital.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-33205, published 2021-06-11. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. Western Digital EdgeRover before 0.25 has an escalation of privileges vulnerability where a low privileged user could load malicious content into directories with higher privileges, because of how…
• CVE-2022-22988, published 2022-01-13. Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days. File and directory permissions have been corrected to prevent unintended users from modifying or accessing resources. It would be more difficult for an authenticated attacker to now traverse through…