The vulnerability of the AvailableApps.php component in the microprogramming software for the Western Digital MyCloud NAS allows a intruder to execute arbitrary code.

The vulnerability of the AvailableApps.php component in the microprogramming software of Western Digital’s MyCloud NAS storage system is related to insecure privilege management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2020-27160

Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 issue 3 of 3...

Remote code execution

Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 issue 3 of 3...

CVE-2020-27160

Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 issue 3 of 3...

CVE-2020-27160: Improper Limitation of a Pathname to a Restricted Directory

Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 issue 3 of 3...