← Back

CVE-2020-12830

nvd nist
Published: Oct 27, 2020Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devices before 5.04.114.

Affected (1)

Westerndigital
1 product
My Cloud Firmware
Configuration A
1 vulnerable · 5 platform
Vulnerable SoftwareAffected Versions
My Cloud Firmware
Before 5.04.114
Running on/withPlatform Versions
Westerndigital
My Cloud Ex4100
All versions
Westerndigital
My Cloud Expert Series Ex2
All versions
Westerndigital
My Cloud Mirror Gen 2
All versions
Westerndigital
My Cloud Pr2100
All versions
Westerndigital
My Cloud Pr4100
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.