Vulnerability Description
WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereby impact the confidentiality of user content. This issue affects: Western Digital WD Discovery WD Discovery Desktop App versions prior to 4.4.396 on Mac; WD Discovery Desktop App versions prior to 4.4.396 on Windows.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Westerndigital | Wd Discovery | < 4.4.396 |
Related Weaknesses (CWE)
References
- https://www.westerndigital.com/support/product-security/wdc-22014-wd-discovery-dVendor Advisory
- https://www.westerndigital.com/support/product-security/wdc-22014-wd-discovery-dVendor Advisory
FAQ
What is CVE-2022-29835?
CVE-2022-29835 is a vulnerability with a CVSS score of 5.3 (MEDIUM). WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algor...
How severe is CVE-2022-29835?
CVE-2022-29835 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-29835?
Check the references section above for vendor advisories and patch information. Affected products include: Westerndigital Wd Discovery.