PT-2020-4931
CVE-2020-27160
·
تاريخ النشر
2020-10-27
·
تاريخ التحديث
2021-12-10
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Western Digital My Cloud NAS versions prior to 5.04.114
Description:
The issue is related to insecure privilege management in the AvailableApps.php component of Western Digital MyCloud NAS microprogram software. It allows a remote attacker to execute arbitrary code, enabling escalation of privileges.
Recommendations:
For versions prior to 5.04.114, update to version 5.04.114 or later to resolve the issue. As a temporary workaround, consider restricting access to the AvailableApps.php component until a patch is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾