EUVD-2020-19683

Malware in sbrugna...

CVE-2020-27159

Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices prior to 5.04.114...

The vulnerability of the DsdkProxy.php component of the Western Digital MyCloud NAS network storage software allows a hacker to execute arbitrary code.

The vulnerability of the DsdkProxy.php component of the Western Digital MyCloud NAS network storage software exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2020-27159

Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices prior to 5.04.114...

CVE-2020-27159

Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices prior to 5.04.114...

Remote code execution

Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices prior to 5.04.114...

CVE-2020-27159

Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices prior to 5.04.114...

CVE-2020-27159

CVE-2020-27159 affects Western Digital My Cloud NAS. The root cause is insufficient sanitization/validation in DsdkProxy.php, enabling remote code execution on affected devices prior to firmware version 5.04.114. The remediation noted in the sources is upgrading to firmware 5.04.114 or later. Exp...