CVE-2022-29838CWE-287

Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices

Medium · published December 9, 2022

CVSS v3.1
4.3
EPSS
0%
Percentile
18.3
In the wild
Unconfirmed
What it is

Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devices allows insecure direct access to the drive information in the case of a device reset. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00271 · 18.3th percentile
Weakness
CWE-287 · Improper Authentication
Published
2022-12-09T00:00Z
EPSS history
Timeline
  • 09 DEC 00:00Z
    Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices
    cvelistv5