Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-29838 EUVD-2022-34156GHSA-cqwg-qq7j-c4fr

Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices

Published Dec 9, 2022 · Updated Apr 23, 2025 · Assigned by WDC PSIRT

Description

Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devices allows insecure direct access to the drive information in the case of a device reset. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.

Affected products

VendorProductAffectedFixed
Western Digital My Cloud My Cloud – < 5.25.124 5.25.124

References