CVE-2020-27160

PoC —

CVSS 3.1

9.8 critical

EPSS

5%p92

Published

Oct 27, 2020 (Oct 27, 2020)

Modified

Jun 17, 2026

Description

Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 (issue 3 of 3).

Vendors: westerndigital
Products: my cloud firmware
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.9%)

In the news0 stories

No ingested article mentions this CVE yet.