PT-2020-17066
CVE-2020-28940
·
تاريخ النشر
2020-12-01
·
تاريخ التحديث
2022-04-26
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Western Digital My Cloud OS 5 versions prior to 5.06.115
Description
The NAS Admin dashboard has an authentication bypass issue that could allow an unauthenticated user to execute privileged commands on the device. This could potentially lead to unauthorized access and control of the device.
Recommendations
For Western Digital My Cloud OS 5 versions prior to 5.06.115, update to version 5.06.115 or later to resolve the issue. As a temporary workaround, consider restricting access to the NAS Admin dashboard until the update can be applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾