CVE-2022-29839

published 2022-12-09

CVE-2022-29839: Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices that could allow an attacker who has…

Priority P4 25 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C H I N A N

Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices that could allow an attacker who has gained access to a relevant endpoint to use that information to access protected data. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
western_digital	my_cloud	>= My Cloud < 5.25.124	5.25.124
westerndigital	my_cloud_os	< 5.25.124	5.25.124

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-522