CVE-2020-27160

Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 issue 3 of 3...

CVE-2020-27159

Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices prior to 5.04.114...

CVE-2020-27160

Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 issue 3 of 3...

Western Digital My Cloud NAS Appliance Denial of Service Vulnerability

The Western Digital MyCloud NAS is a network attached storage device. A denial of service vulnerability exists in the Western Digital My Cloud NAS device, which can be exploited by an attacker to conduct denial of service attacks because any unauthenticated user can set global language preference...

Western Digital My Cloud NAS Device Cross-Site Request Forgery Vulnerability

The Western Digital MyCloud NAS is a network attached storage device. A cross-site request forgery vulnerability exists in the Western Digital My Cloud NAS device due to the lack of XSRF protection in the WD My Cloud web interface, which allows an attacker to connect a victim's web browser to the...

Western Digital My Cloud NAS Device Hardcoded Backdoor Vulnerability

The Western Digital MyCloud NAS is a network attached storage device. A hard-coded backdoor vulnerability exists in the Western Digital My Cloud NAS device, where an administrator username and password cannot be changed because they are hard-coded into a binary file, allowing an arbitrary user to...