Vulnerability Details CVE-2020-12830
Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devices before 5.04.114.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.05
EPSS Ranking 89.1%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://support.wdc.com/downloads.aspx?g=907&lang=en
- https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114
- https://support.wdc.com/downloads.aspx?g=907&lang=en
- https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114
Products affected by CVE-2020-12830
-
cpe:2.3:h:westerndigital:my_cloud_ex4100:-
-
cpe:2.3:h:westerndigital:my_cloud_expert_series_ex2:-
-
cpe:2.3:h:westerndigital:my_cloud_mirror_-_gen_2:-
-
cpe:2.3:h:westerndigital:my_cloud_pr2100:-
-
cpe:2.3:h:westerndigital:my_cloud_pr4100:-
-
cpe:2.3:o:westerndigital:my_cloud_firmware:-
-
cpe:2.3:o:westerndigital:my_cloud_firmware:04.05.00-320
-
cpe:2.3:o:westerndigital:my_cloud_firmware:2.31.149
-
cpe:2.3:o:westerndigital:my_cloud_firmware:2.31.163
-
cpe:2.3:o:westerndigital:my_cloud_firmware:2.31.174
-
cpe:2.3:o:westerndigital:my_cloud_firmware:2.31.183