CVE-2020-29563

An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to gain access to the device.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:westerndigital:my_cloud_os_5:*:*:*:*:*:*:*:*
OR cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-:*:*:*:*:*:*:*
cpe:2.3:h:westerndigital:my_cloud_ex4100:-:*:*:*:*:*:*:*
cpe:2.3:h:westerndigital:my_cloud_pr2100:-:*:*:*:*:*:*:*
cpe:2.3:h:westerndigital:my_cloud_pr4100:-:*:*:*:*:*:*:*
cpe:2.3:h:westerndigital:my_cloud_mirror_gen_2:-:*:*:*:*:*:*:*

History

06 Aug 2022, 03:52

Type Values Removed Values Added
References (MISC) https://www.zerodayinitiative.com/advisories/ZDI-20-1446/ - (MISC) https://www.zerodayinitiative.com/advisories/ZDI-20-1446/ - Third Party Advisory, VDB Entry

Information

Published : 2020-12-12 00:15

Updated : 2022-08-06 03:52


NVD link : CVE-2020-29563

Mitre link : CVE-2020-29563


JSON object : View

Products Affected

westerndigital

  • my_cloud_mirror_gen_2
  • my_cloud_pr4100
  • my_cloud_ex2_ultra
  • my_cloud_os_5
  • my_cloud_ex4100
  • my_cloud_pr2100
CWE
CWE-287

Improper Authentication