What’s Vulnerable › Vulnerabilities

CVE-2020-12830

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-10-27 · updated 2026-06-17
• Weakness: CWE-787

Description

Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devices before 5.04.114.

Affected products

• Westerndigital My Cloud Firmware: before 5.04.114 — fixed in 5.04.114

How to fix

Upgrade to a fixed version: Westerndigital My Cloud Firmware 5.04.114. Check the vendor advisory for mitigations.

References

• https://support.wdc.com/downloads.aspx?g=907&lang=en
• https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114
• https://support.wdc.com/downloads.aspx?g=907&lang=en
• https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114

Get alerted when CVE-2020-12830 or the next vulnerability affects your stack