CVE-2022-29838

4.6 mediumEPSS 0.3%

Medium (4.6) in westerndigital my cloud os. EPSS 0.3% chance of exploitation in the next 30 days.

Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devices allows insecure direct access to the drive information in the case of a device reset. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.

Severity

CVSS 3.1

4.6 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2022-12-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

westerndigital:my_cloud_os

References

https://www.westerndigital.com/support/product-security/wdc-22019-my-cloud-firmware-version-5-25-124
https://www.westerndigital.com/support/product-security/wdc-22019-my-cloud-firmware-version-5-25-124

Check your stack JSON