CVE-2020-10951

Medium

Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages.

mitre·CWE-1021·Published 2020-04-15

CVSS

4.7

EPSS

0.01

KEV

Exploits

cve.orgen

95 chars

Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages.

NVDen

95 chars

Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages.

NVDes

151 chars

Los dispositivos Western Digital My Cloud Home e ibi versiones anteriores a 2.2.0, permiten un secuestro de cliqueo en las páginas de inicio de sesión.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N
3.1	Primary	NVD	4.7	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N