The vulnerability of Western Digital MyCloud NAS’ network storage software relates to writing beyond the buffer memory limit, allowing attackers to escalate their privileges.

The vulnerability of Western Digital MyCloud NAS’ network storage software relates to writing beyond the buffer limits of memory. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges...

CVE-2020-13799

Western Digital has identified a security vulnerability in the Replay Protected Memory Block RPMB protocol as specified in multiple standards for storage device interfaces, including all versions of eMMC, UFS, and NVMe. The RPMB protocol is specified by industry standards bodies and is implemente...

Design/Logic Flaw

Western Digital has identified a security vulnerability in the Replay Protected Memory Block RPMB protocol as specified in multiple standards for storage device interfaces, including all versions of eMMC, UFS, and NVMe. The RPMB protocol is specified by industry standards bodies and is implemente...

CVE-2020-13799

Western Digital has identified a security vulnerability in the Replay Protected Memory Block RPMB protocol as specified in multiple standards for storage device interfaces, including all versions of eMMC, UFS, and NVMe. The RPMB protocol is specified by industry standards bodies and is implemente...

CVE-2020-13799

CVE-2020-13799 describes a vulnerability in the Replay Protected Memory Block (RPMB) protocol used by storage interfaces (eMMC/UFS/NVMe). The issue arises when an attacker can affect the RPMB state without the knowledge of the trusted component that uses RPMB, across multiple standards, potential...

PT-2020-13685

Name of the Vulnerable Software and Affected Versions Western Digital iNAND devices through 2020-06-03 Description A security issue has been identified in the Replay Protected Memory Block RPMB protocol, which is used by storage devices to secure trusted firmware. This issue can be exploited in...

Western Digital My Cloud Buffer Overflow Vulnerability

Western Digital My Cloud is a personal cloud storage device from Western Digital. A buffer overflow vulnerability exists in Western Digital My Cloud devices prior to version 5.04.114, which can be exploited by an attacker to perform a privileged escalation on the device via unauthorized remote co...

Western Digital My Cloud Remote Code Execution Vulnerability (CNVD-2020-60460)

Western Digital My Cloud is a personal cloud storage device from Western Digital. A security vulnerability exists in Western Digital My Cloud NAS versions prior to 5.04.114, which stems from a remote code execution vulnerability in availableapp .php. No details of the vulnerability are available ...

Western Digital My Cloud Input Validation Error Vulnerability

Western Digital My Cloud is a personal cloud storage device from Western Digital. An input validation error vulnerability exists in Western Digital My Cloud NAS versions prior to 5.04.114, which stems from DsdkProxy.php failing to adequately sanitize and validate user input. No detailed...

Western Digital My Cloud NAS Elevation of Privilege Vulnerability

Western Digital My Cloud is a personal cloud storage device. A security vulnerability exists in the Western Digital My Cloud NAS that can be exploited by a remote attacker to submit a special request that can elevate privileges...

Western Digital My Cloud Multiple Products < 5.04.114 Multiple Vulnerabilities

Multiple Western Digital My Cloud products are prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

CVE-2020-27744

An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow remote code execution with resultant escalation of privileges...

CVE-2020-27744

An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow remote code execution with resultant escalation of privileges...

Remote code execution

An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow remote code execution with resultant escalation of privileges...

CVE-2020-27744

CVE-2020-27744 concerns Western Digital My Cloud NAS devices affected by firmware prior to 5.04.114. The issue enables remote code execution with resulting privilege escalation. The public descriptions consistently identify the device family and vulnerable firmware range but do not disclose the u...

CVE-2020-27744

An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow remote code execution with resultant escalation of privileges...

Western Digital My Cloud Remote Code Execution Vulnerability

Western Digital My Cloud is a personal cloud storage device from Western Digital. A remote code execution vulnerability exists in Western Digital My Cloud Devices prior to version 5.4.1140, which originates from remote code execution due to insufficient user input validation in reg device.php. No...

Western Digital My Cloud NAS Elevation of Privilege Vulnerability

Western Digital My Cloud is a personal cloud storage device from Western Digital. An elevation of privilege vulnerability exists in Western Digital My Cloud NAS versions prior to 5.04.114, which stems from a remote code execution vulnerability in cgi api.php that allows privilege escalation. No...

CVE-2020-27160

Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 issue 3 of 3...

CVE-2020-27159

Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices prior to 5.04.114...