CVE-2022-29838

🗓️ 09 Dec 2022 00:00:00Reported by WDC PSIRTType

Improper Authentication vulnerability in Western Digital My Cloud device

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-29838	9 Dec 202220:18	–	circl
CNNVD	Western Digital My Cloud 授权问题漏洞	9 Dec 202200:00	–	cnnvd
Cvelist	CVE-2022-29838 Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices	9 Dec 202200:00	–	cvelist
EUVD	EUVD-2022-34156	3 Oct 202520:07	–	euvd
NVD	CVE-2022-29838	9 Dec 202218:15	–	nvd
OpenVAS	Western Digital My Cloud Multiple Products 5.x < 5.25.124 Multiple Vulnerabilities (WDC-22019)	19 Dec 202200:00	–	openvas
OSV	CVE-2022-29838	9 Dec 202218:15	–	osv
Prion	Authentication flaw	9 Dec 202218:15	–	prion
Positive Technologies	PT-2022-19868 · Western Digital · Western Digital My Cloud	9 Dec 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-29838	22 May 202522:47	–	redhatcve

NVD

Node

westerndigital my_cloud_osRange<5.25.124

AND

westerndigital my_cloudMatch-

westerndigital my_cloud_dl2100Match-

westerndigital my_cloud_dl4100Match-

westerndigital my_cloud_ex2_ultraMatch-

westerndigital my_cloud_ex2100Match-

westerndigital my_cloud_ex4100Match-

westerndigital my_cloud_mirror_g2Match-

westerndigital my_cloud_pr2100Match-

westerndigital my_cloud_pr4100Match-

westerndigital wd_cloudMatch-

[
  {
    "vendor": "Western Digital",
    "product": "My Cloud",
    "versions": [
      {
        "version": "My Cloud",
        "status": "affected",
        "lessThan": "5.25.124",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "Linux"
    ]
  }
]

Source	Link
westerndigital	www.westerndigital.com/support/product-security/wdc-22019-my-cloud-firmware-version-5-25-124

21 Nov 2024 06:59Current

4.5Medium risk

Vulners AI Score4.5

CVSS 3.14.3 - 4.6

EPSS0.00155

SSVC

CWE-287