CVE-2022-29839
Remote Backups Application Discloses Stored Credentials
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.1EPSS 0.1%KEV nãoPoC —Patch —
Lifecycle
09 Dec 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices that could allow an attacker who has gained access to a relevant endpoint to use that information to access protected data. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected products
Western Digital · My CloudWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →