CVE-2020-29563
CRITICALWestern Digital My Cloud OS <5.07.118 - Auth Bypass
Title source: llmDescription
An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to gain access to the device.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
https://www.westerndigital.com/support/productsecurity/wdc-20010-my-cloud-os5-firmware-5-07-118
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-20-1446/
Scores
CVSS v3
9.8
EPSS
0.0289
EPSS Percentile
85.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-287
Status
published
Products (1)
westerndigital/my_cloud_os_5
< 5.07.118
Published
Dec 12, 2020
Tracked Since
Feb 18, 2026