CVE-2020-28940

creationtimestamp| type| source ---|---|--- 2020-12-01 18:54:08+00:00| seen| https://t.me/cibsecurity/16986...

CVE-2020-28940

The CVE concerns Western Digital My Cloud PR4100 NAS running My Cloud OS 5 prior to 5.06.115. The nasAdmin service (listening on TCP ports 80/443) contains an incorrect string-matching flaw that allows an unauthenticated user to bypass authentication and execute commands with root privileges. Imp...