Insecure Direct Access Vulnerability in Western Digital My Cloud Devices

Insecure Direct Access Vulnerability in Western Digital My Cloud Devices

CVE-2022-29838 · MEDIUM Severity

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devices allows insecure direct access to the drive information in the case of a device reset. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.