CVE-2020-27744: Westerndigital My Cloud Firmware

Critical severity, CVSS 9.8. EPSS: 6.2% chance of exploitation in the next 30 days.

An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow remote code execution with resultant escalation of privileges.

Affected products

• Westerndigital My Cloud Firmware: before 5.04.114 (fixed in 5.04.114)

Published 2020-10-29. Last modified 2026-06-17.