CVEvulnerability

CVE-2020-12830

9.8 CRITICAL Published 2020-10-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-10-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-787

Description

Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devices before 5.04.114.

Affected configurations

• westerndigital my cloud firmware (< 5.04.114)

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References