Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices that could allow an attacker who has gained access to a relevant endpoint to use that information to access protected data. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.
References
| Link | Resource |
|---|---|
| https://www.westerndigital.com/support/product-security/wdc-22019-my-cloud-firmware-version-5-25-124 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
12 Dec 2022, 17:44
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:westerndigital:my_cloud_os:*:*:*:*:*:*:*:* cpe:2.3:h:westerndigital:my_cloud:-:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:h:westerndigital:my_cloud_mirror_g2:-:*:*:*:*:*:*:* cpe:2.3:h:westerndigital:my_cloud_ex4100:-:*:*:*:*:*:*:* cpe:2.3:h:westerndigital:my_cloud_dl4100:-:*:*:*:*:*:*:* cpe:2.3:h:westerndigital:my_cloud_pr2100:-:*:*:*:*:*:*:* cpe:2.3:h:westerndigital:my_cloud_ex2100:-:*:*:*:*:*:*:* cpe:2.3:h:westerndigital:my_cloud_pr4100:-:*:*:*:*:*:*:* cpe:2.3:h:westerndigital:my_cloud_dl2100:-:*:*:*:*:*:*:* cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-:*:*:*:*:*:*:* cpe:2.3:h:westerndigital:wd_cloud:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| References | (MISC) https://www.westerndigital.com/support/product-security/wdc-22019-my-cloud-firmware-version-5-25-124 - Vendor Advisory | |
| CWE | CWE-522 | |
| First Time |
Westerndigital
Westerndigital my Cloud Dl2100 Westerndigital my Cloud Pr2100 Westerndigital my Cloud Dl4100 Westerndigital my Cloud Ex2100 Westerndigital my Cloud Mirror G2 Linux Linux linux Kernel Westerndigital wd Cloud Westerndigital my Cloud Ex2 Ultra Westerndigital my Cloud Ex4100 Westerndigital my Cloud Pr4100 Westerndigital my Cloud Os Westerndigital my Cloud |
09 Dec 2022, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-12-09 18:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-29839
Mitre link : CVE-2022-29839
CVE.ORG link : CVE-2022-29839
JSON object : View
Products Affected
westerndigital
- my_cloud_dl2100
- my_cloud_os
- my_cloud_pr4100
- my_cloud_mirror_g2
- my_cloud_ex2100
- my_cloud_ex2_ultra
- my_cloud
- my_cloud_ex4100
- my_cloud_dl4100
- wd_cloud
- my_cloud_pr2100
linux
- linux_kernel
CWE
CWE-522
Insufficiently Protected Credentials