CVE-2020-28970

An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to execute privileged commands on the device via a cookie. (In addition, an upload endpoint could then be used by an authenticated administrator to upload executable PHP scripts.)

• CWE-287

• https://support.wdc.com/downloads.aspx?g=907&lang=en#downloadsPatch, Vendor Advisory
• https://www.westerndigital.com/support/productsecurity/wdc-20009-os5-firmware-5-06-115Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-20-1448/Third Party Advisory, VDB Entry
• https://support.wdc.com/downloads.aspx?g=907&lang=en#downloadsPatch, Vendor Advisory
• https://www.westerndigital.com/support/productsecurity/wdc-20009-os5-firmware-5-06-115Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-20-1448/Third Party Advisory, VDB Entry

Published

Dec 1, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-28963Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was disc…7.8
• CVE-2020-28964Internet Download Manager 6.37.11.1 was discovered to contai…6.7
• CVE-2020-28967FlashGet v1.9.6 was discovered to contain a buffer overflow …8.8
• CVE-2020-28968Draytek VigorAP 1000C contains a stored cross-site scripting…5.4
• CVE-2020-28969Aplioxio PDF ShapingUp 5.0.0.139 contains a buffer overflow …7.8
• CVE-2020-2897Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
• CVE-2020-28971An issue was discovered on Western Digital My Cloud OS 5 dev…9.8
• CVE-2020-28972In SaltStack Salt before 3002.5, authentication to VMware vc…5.9
• CVE-2020-28973The ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) …7.5
• CVE-2020-28974A slab-out-of-bounds read in fbcon in the Linux kernel befor…5
• CVE-2020-28975svm_predict_values in svm.cpp in Libsvm v324, as used in sci…7.5
• CVE-2020-28976The Canto plugin 1.3.0 for WordPress contains a blind SSRF v…5.3