CVE-2022-29835

MEDIUM 5.3CVE-2022-29835 · Published 19/09/2022 · updated 17/06/2026

In short

CVE-2022-29835 is a MEDIUM (CVSS 5.3) vulnerability affecting wd discovery (westerndigital).
Chance of exploitation in the next 30 days (EPSS): 0.20%, higher than 9.7% of all vulnerabilities.
Fix: update to 4.4.396 or later.

Package	Affected versions	Patched versions
wd discovery westerndigital	`< 4.4.396`	`4.4.396`

Description

WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereby impact the confidentiality of user content. This issue affects: Western Digital WD Discovery WD Discovery Desktop App versions prior to 4.4.396 on Mac; WD Discovery Desktop App versions prior to 4.4.396 on Windows.

References

westerndigital.com/support/product-security/wdc-22014-wd-discovery-desktop-app-version-4-4-396 · Vendor Advisory

More vulnerabilities in wd discovery

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free