CVE-2022-29838 — Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices

CVE-2022-29838

Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices PUBLISHED

Description (CNA)

Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devices allows insecure direct access to the drive information in the case of a device reset. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.

Affected (CNA)

Vendor / product	Versions
Western Digital / My Cloud	affected My Cloud before 5.25.124

CWE

CWE-287

References

https://www.westerndigital.com/support/product-security/wdc-22019-my-cloud-firmware-version-5-25-124

ADP enrichment

CVE

No English description supplied.

https://www.westerndigital.com/support/product-security/wdc-22019-my-cloud-firmware-version-5-25-124

CISA-ADP

No English description supplied.

No references supplied.