Western Digital My Cloud NAS Remote Code Execution Multiple Vulnerabilities (CVE-2020-25765; CVE-2020-27158; CVE-2020-27159; CVE-2020-27160; CVE-2020-27744)

A remote code execution vulnerability exists in Western Digital My Cloud NAS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2020-27158

The CVE-2020-27158 entry affects Western Digital My Cloud NAS devices. A remote code execution flaw in cgi_api.php could allow privilege escalation, with impact on devices running firmware before 5.04.114. The vulnerability is described as enabling arbitrary code execution on the affected system,...