CVE-2020-12427

HIGH 8.8CVE-2020-12427 · Published 13/05/2020 · updated 17/06/2026

In short

CVE-2020-12427 is a HIGH (CVSS 8.8) vulnerability affecting wd discovery (westerndigital).
Chance of exploitation in the next 30 days (EPSS): 0.45%, higher than 39.4% of all vulnerabilities.
Fix: update to 3.8.229 or later.

Package	Affected versions	Patched versions
wd discovery westerndigital	`< 3.8.229`	`3.8.229`

Description

The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space.

References

support.wdc.com/downloads.aspx · Vendor Advisory
westerndigital.com/support/productsecurity/wdc-20004-wd-discovery-cross-site-request-forgery-csrf · Vendor Advisory

More vulnerabilities in wd discovery

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free