Vulnerability Details CVE-2020-29563
An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to gain access to the device.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.056
EPSS Ranking 89.9%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://www.westerndigital.com/support/productsecurity/wdc-20010-my-cloud-os5-firmware-5-07-118
- https://www.zerodayinitiative.com/advisories/ZDI-20-1446/
- https://www.westerndigital.com/support/productsecurity/wdc-20010-my-cloud-os5-firmware-5-07-118
- https://www.zerodayinitiative.com/advisories/ZDI-20-1446/
Products affected by CVE-2020-29563
-
cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-
-
cpe:2.3:h:westerndigital:my_cloud_ex4100:-
-
cpe:2.3:h:westerndigital:my_cloud_mirror_gen_2:-
-
cpe:2.3:h:westerndigital:my_cloud_pr2100:-
-
cpe:2.3:h:westerndigital:my_cloud_pr4100:-
-
cpe:2.3:o:westerndigital:my_cloud_os_5:5.02.104
-
cpe:2.3:o:westerndigital:my_cloud_os_5:5.03.103
-
cpe:2.3:o:westerndigital:my_cloud_os_5:5.04.114
-
cpe:2.3:o:westerndigital:my_cloud_os_5:5.05.111
-
cpe:2.3:o:westerndigital:my_cloud_os_5:5.06.115