CVE-2020-27159

PoC —

CVSS 3.1

9.8 critical

EPSS

6%p93

Published

Oct 27, 2020 (Oct 27, 2020)

Modified

Jun 17, 2026

Description

Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices prior to 5.04.114

Vendors: westerndigital
Products: my cloud firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (6.2%)

In the news0 stories

No ingested article mentions this CVE yet.