CVE-2020-12427: CSRF
The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-12427?
CVE-2020-12427 is a vulnerability in the Western Digital WD Discovery application for MyCloud Home on Windows and macOS, allowing for CSRF attacks with various impacts.
What are the impacts of CVE-2020-12427?
The impacts of CVE-2020-12427 include stealing data, modifying disk contents, and exhausting disk space.
How does CVE-2020-12427 affect Western Digital WD Discovery application?
CVE-2020-12427 affects the Western Digital WD Discovery application by enabling CSRF attacks.
How can I check if I am affected by CVE-2020-12427?
You are affected by CVE-2020-12427 if you are using the Western Digital WD Discovery application before version 3.8.229 on MyCloud Home.
How can I fix CVE-2020-12427?
To fix CVE-2020-12427, update the Western Digital WD Discovery application to version 3.8.229 or later.