by Kastro
Paper/Archive/CVE-2020-27159

CVE-2020-27159

mitre — Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input…

EPSS 6%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 93.5.935 × 2018.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices prior to 5.04.114

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refwesterndigital.com/support/productsecurityrefwesterndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114refcomparitech.com/blog/information-security/security-vulnerabilities-80000-devices-update-now