CVE-2022-29838: Westerndigital My Cloud OS

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devices allows insecure direct access to the drive information in the case of a device reset. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.

Affected products

Published 2022-12-09. Last modified 2026-06-17.