CVE-2020-27160

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud NAS versions prior to 5.04.114

Description: The issue is related to insecure privilege management in the AvailableApps.php component of Western Digital MyCloud NAS microprogram software. It allows a remote attacker to execute arbitrary code, enabling escalation of privileges.

Recommendations: For versions prior to 5.04.114, update to version 5.04.114 or later to resolve the issue. As a temporary workaround, consider restricting access to the AvailableApps.php component until a patch is applied.