CVE-2020-27158

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud NAS devices versions prior to 5.04.114

Description: The issue is related to a remote code execution vulnerability in the cgi api.php component of Western Digital My Cloud NAS devices. This vulnerability is associated with insecure privilege management, which can be exploited by a remote attacker to execute arbitrary code, thereby escalating privileges.

Recommendations: For versions prior to 5.04.114, update to version 5.04.114 or later to resolve the issue. As a temporary workaround, consider restricting access to the cgi api.php component until a patch is applied.