PatchTheCVECVE-2022-29839: Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Clo
CVE-2022-29839 is a medium-severity flaw (CVSS 4.1) affecting my cloud os. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices that could allow an attacker who has gained access to a relevant endpoint to use that information to access protected data. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 4.1 (Medium) |
| Attack vector | Local |
| Attack complexity | High |
| Privileges needed | High |
| User interaction | None |
| EPSS exploit chance | 0.1% (top 97%) |
| CISA exploited list | No |
| Weakness | CWE-522 |
| Published | 2022-12-09 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-29839?
my cloud os: upgrade to 5.25.124. Exact commands for each OS are on this page.
Is CVE-2022-29839 being exploited?
CVE-2022-29839 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-29839 affect?
CVE-2022-29839 affects my cloud os. Severity is medium (CVSS 4.1). Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices that could allow an attacker who has gained access to a relevant endpoint to use that information to access protected d
How urgent is CVE-2022-29839?
Priority 15/100. No elevated risk signals yet.
Software pages
Western Digital vulnerabilities
Related CVEs
- CVE-2023-22814 CRITICAL 10.0 UPGRADE An authentication bypass issue via spoofing was discovered in the token-based authentication mechanism that co
- CVE-2022-29842 CRITICAL 9.8 UPGRADE Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability that could a
- CVE-2022-29841 HIGH 8.0 UPGRADE Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that
- CVE-2022-29840 MEDIUM 5.1 UPGRADE Server-Side Request Forgery (SSRF) vulnerability that could allow a rogue server on the local network to modif
- CVE-2022-29838 MEDIUM 4.3 UPGRADE Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My C