Lucene search

MitreCVE-2020-12830

HistoryOct 27, 2020 - 8:15 p.m.

CVE-2020-12830

2020-10-2720:15:21

CWE-787

mitre

web.nvd.nist.gov

cve-2020-12830

stack buffer overflow

vulnerability

western digital

my cloud

unauthorized remote code execution

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.014

Percentile

86.8%

JSON

Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devices before 5.04.114.

Affected configurations

Nvd

Node

westerndigitalmy_cloud_ex4100Match-

westerndigitalmy_cloud_expert_series_ex2Match-

westerndigitalmy_cloud_mirror_-_gen_2Match-

westerndigitalmy_cloud_pr2100Match-

westerndigitalmy_cloud_pr4100Match-

AND

westerndigitalmy_cloud_firmwareRange<5.04.114

VendorProductVersionCPE
westerndigitalmy_cloud_ex4100-cpe:2.3:h:westerndigital:my_cloud_ex4100:-:*:*:*:*:*:*:*
westerndigitalmy_cloud_expert_series_ex2-cpe:2.3:h:westerndigital:my_cloud_expert_series_ex2:-:*:*:*:*:*:*:*
westerndigitalmy_cloud_mirror_-_gen_2-cpe:2.3:h:westerndigital:my_cloud_mirror_-_gen_2:-:*:*:*:*:*:*:*
westerndigitalmy_cloud_pr2100-cpe:2.3:h:westerndigital:my_cloud_pr2100:-:*:*:*:*:*:*:*
westerndigitalmy_cloud_pr4100-cpe:2.3:h:westerndigital:my_cloud_pr4100:-:*:*:*:*:*:*:*
westerndigitalmy_cloud_firmware*cpe:2.3:o:westerndigital:my_cloud_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
westerndigital	my_cloud_ex4100	-	cpe:2.3:h:westerndigital:my_cloud_ex4100:-:::::::*
westerndigital	my_cloud_expert_series_ex2	-	cpe:2.3:h:westerndigital:my_cloud_expert_series_ex2:-:::::::*
westerndigital	my_cloud_mirror_-_gen_2	-	cpe:2.3:h:westerndigital:my_cloud_mirror_-_gen_2:-:::::::*
westerndigital	my_cloud_pr2100	-	cpe:2.3:h:westerndigital:my_cloud_pr2100:-:::::::*
westerndigital	my_cloud_pr4100	-	cpe:2.3:h:westerndigital:my_cloud_pr4100:-:::::::*
westerndigital	my_cloud_firmware	*	cpe:2.3:o:westerndigital:my_cloud_firmware::::::::

References

support.wdc.com/downloads.aspx?g=907&lang=en

www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.014

Percentile

86.8%

JSON

Related for CVE-2020-12830