Unscored CVE-2020-27159 EUVD-2020-19683GHSA-8vhp-mfqv-2pqj

Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input i…

Published Oct 27, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices prior to 5.04.114

References

https://www.westerndigital.com/support/productsecurity
https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114
https://www.comparitech.com/blog/information-security/security-vulnerabilities-80000-devices-update-now/