CVE-2020-12830 — CRITICAL (9.8)

Q: How severe is CVE-2020-12830?

CVE-2020-12830 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Q: Is there a patch for CVE-2020-12830?

Check the references section above for vendor advisories and patch information. Affected products include: Westerndigital My Cloud Firmware, Westerndigital My Cloud Ex4100, Westerndigital My Cloud Expert Series Ex2, Westerndigital My Cloud Mirror - Gen 2, Westerndigital My Cloud Pr2100.

Vulnerability Description

Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devices before 5.04.114.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Westerndigital	My Cloud Firmware	< 5.04.114
Westerndigital	My Cloud Ex4100	-
Westerndigital	My Cloud Expert Series Ex2	-
Westerndigital	My Cloud Mirror - Gen 2	-
Westerndigital	My Cloud Pr2100	-
Westerndigital	My Cloud Pr4100	-

Related Weaknesses (CWE)

CWE-787

References

https://support.wdc.com/downloads.aspx?g=907&lang=enVendor Advisory
https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmwaVendor Advisory
https://support.wdc.com/downloads.aspx?g=907&lang=enVendor Advisory
https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmwaVendor Advisory

FAQ

What is CVE-2020-12830?

CVE-2020-12830 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devic...

How severe is CVE-2020-12830?

CVE-2020-12830 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2020-12830?

Check the references section above for vendor advisories and patch information. Affected products include: Westerndigital My Cloud Firmware, Westerndigital My Cloud Ex4100, Westerndigital My Cloud Expert Series Ex2, Westerndigital My Cloud Mirror - Gen 2, Westerndigital My Cloud Pr2100.