Critical severity9.8NVD Advisory· Published Oct 27, 2020· Updated Jun 17, 2026
CVE-2020-27159
CVE-2020-27159
Description
Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices prior to 5.04.114
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:westerndigital:my_cloud_firmware:*:*:*:*:*:*:*:*Range: <5.04.114
- Western Digital/My Cloud NAS devicesdescription
- Range: <5.04.114
Patches
Vulnerability mechanics
References
3- www.comparitech.com/blog/information-security/security-vulnerabilities-80000-devices-update-now/nvdExploitThird Party Advisory
- www.westerndigital.com/support/productsecuritynvdVendor Advisory
- www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114nvdVendor Advisory
News mentions
0No linked articles in our index yet.