CVE-2022-29838
Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices
- State
- Published
- Severity
- 4.3 Medium
- Published
- Dec 9, 2022
- Updated
- Apr 23, 2025
- Reserved
- Apr 27, 2022
Description
Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devices allows insecure direct access to the drive information in the case of a device reset. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.3 Medium | CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N | WDC PSIRT |
Weaknesses
- CWE-287 Improper Authentication
Affected Products
| Product | Versions |
|---|---|
My CloudWestern Digital |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.