6 matches found
AvailableApps.php Component Code Execution
The vulnerability of the AvailableApps.php component in the microprogramming software of Western Digital’s MyCloud NAS storage system is related to insecure privilege management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2020-27160
Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 issue 3 of 3...
Remote code execution
Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 issue 3 of 3...
CVE-2020-27160
Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 issue 3 of 3...
CVE-2020-27160: Improper Limitation of a Pathname to a Restricted Directory
Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 issue 3 of 3...
PT-2020-4931
Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud NAS versions prior to 5.04.114 Description: The issue is related to insecure privilege management in the AvailableApps.php component of Western Digital MyCloud NAS microprogram software. It allows a remote attacker to...