CVE-2020-12427: Westerndigital Wd Discovery

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space.

Affected products

• Westerndigital Wd Discovery: before 3.8.229 (fixed in 3.8.229)

Published 2020-05-13. Last modified 2026-06-17.