CVE-2020-12427

—

CVSS 3.1

8.8 high

EPSS

<1%p38

Published

May 13, 2020 (May 13, 2020)

Modified

Jun 17, 2026

Description

The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space.

Vendors: westerndigital
Products: wd discovery
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.