Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud de...

CVE-2020-12830 · published 6 years ago
Summary

Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devices before 5.04.114.

What to do
  • Update westerndigital my_cloud_firmware to version 5.04.114 or later.
Affected software
VendorProductAffected versions
westerndigital my_cloud_firmware < 5.04.114
cpe:2.3:o:westerndigital:my_cloud_firmware:*:*:*:*:*:*:*:*
Original advisory text
Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud de...
Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devices before 5.04.114.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Exploitation
3% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published27 Oct 2020
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2020-12830 · NVD
Track software like this
Free during beta