Back to Database
Status published
Medium
CVE-2022-29839
Remote Backups Application Discloses Stored Credentials
Vulnerability Description
Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices that could allow an attacker who has gained access to a relevant endpoint to use that information to access protected data. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-29839
Credits & Attribution
No credits recorded in the NVD database.
References
More from Western Digital
View All →CVE-2025-30248
DLL hijacking in the WD Discovery Installer in Western Digital...
High
8.9
CVE-2025-30247
An OS command injection vulnerability in user interface in Western...
Critical
9.3
CVE-2024-22170
Unchecked buffer in Dynamic DNS client
Critical
9.2
CVE-2024-22169
Misconfiguration in node.js causing a code execution in WD Discovery
High
7.1
CVE-2024-22168
Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps
Medium
5.9
Affected Vendor
Western Digital
View all reports →Affected Software
My Cloud
Vulnerable Versions:
My Cloud
Timeline
Official Publish:
December 9th, 2022
Last Modified:
April 22nd, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N