cvedb.io
CVE-2022-29839
MEDIUM · CVSS 4.1
EPSS exploitation probability: 0%
Published 2022-12-09T18:15:18.880 · Last modified 2026-06-17T04:40:48.373

Summary

Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices that could allow an attacker who has gained access to a relevant endpoint to use that information to access protected data. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.

Affected products

westerndigital — my_cloud_os

Does this affect you?

Add your gear to cvedb and we'll alert you only when westerndigital ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.