CVE-2022-22994

CVE-2022-22994 is a critical remote code execution vulnerability affecting Western Digital My Cloud devices, stemming from insufficient verification of HTTP calls that allowed attackers to trick NAS devices into loading malicious code. With a CVSS score of 9.8, it presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.