← Database
CVE-2022-29838
MEDIUM
CVSS: 4.3
Published: 2022-12-09
Modified: 2026-06-17
Description
Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devices allows insecure direct access to the drive information in the case of a device reset. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.
Affected Platforms
Westerndigital My Cloud OsWesterndigital My Cloud Pr2100Westerndigital My Cloud Pr4100Westerndigital My Cloud Dl2100Westerndigital My Cloud Ex2100Westerndigital My CloudWesterndigital My Cloud Mirror G2Westerndigital Wd CloudWesterndigital My Cloud Ex2 UltraWesterndigital My Cloud Dl4100
Weakness Type
CWE-287, CWE-287