Western Digital My Cloud NAS Remote Code Execution Multiple Vulnerabilities (CVE-2020-25765; CVE-2020-27158; CVE-2020-27159; CVE-2020-27160; CVE-2020-27744)

A remote code execution vulnerability exists in Western Digital My Cloud NAS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2020-27160

Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 issue 3 of 3...

CVE-2020-27160

CVE-2020-27160 affects Western Digital My Cloud NAS devices prior to firmware 5.04.114. The vulnerability arises in AvailableApps.php, enabling remote code execution andPrivilege escalation, potentially allowing a remote attacker to run arbitrary commands with the device’s privileges. Affected pr...