Western Digital My Cloud NAS Remote Code Execution Multiple Vulnerabilities (CVE-2020-25765; CVE-2020-27158; CVE-2020-27159; CVE-2020-27160; CVE-2020-27744)

A remote code execution vulnerability exists in Western Digital My Cloud NAS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2020-25765

CVE-2020-25765 affects Western Digital My Cloud NAS devices prior to version 5.4.1140. The root cause is insufficient validation of user input in reg_device.php, leading to a remote code execution vulnerability. Documents consistently describe a remote code execution risk without detailing exploi...

CVE-2020-25765

Addressed remote code execution vulnerability in regdevice.php due to insufficient validation of user input.in Western Digital My Cloud Devices prior to 5.4.1140...