Dont buy any my cloud product from WD they dobt care about security updates. There are several Bugs in the Software of all Myclouds. 85 bugs detected in earlie 2017 and some new/same once detected in june and WD gets informed about them. WD answered with give us 90 Days time to fix them. Now in 201…

Well, as already explained some posts above (seems i need to repeat stuff here over and over again) you either need to have local access to the device and run code on it (e.g. via SSH) in user space or trick a user with a vulnerable system to visit a malicious web page with his browser. So now its …

[image] dswv42: For example, suppose it’s a corporate environment and a disgruntled employee wants to steal company information, wipe out the system, etc There are much easier ways to do that. The MyCloud, which is the subject of this subforum, is a consumer device, not really intended for c…

Well anyway the topic is WD is not doing a great job. They have to fix spectre and meltdown and they have to fix all other bugs. The real problem with this company is they are not fast in reacting to such problems.

But corporate users won’t be reading this subforum; go post on the appropriate subforum.

[image] dswv42: Getting access to the device, either local or remote, has been proven to be a trivial process… time and time again. As I have already said, using the CPU vulnerabilities would be pointless after one has already obtained shell access, regardless of the method used. Exactly what…

You already have agreed to that with your post i have quoted in Do not buy! - #39 by tempaccount ?

[image] dswv42: I will post wherever I feel it is appropriate. None of this sandbox nonsense. You’re free to post where you like. But the other subforum would be more relevant. I’m out.

This discussion seems to have degenerated off into several tangents covering a variety of separate issues. Yes this support forum layout is not ideal due in part to how WD has named their products. It has been a common complaint for years that WD is causing confusion with their product and firmware…

You can just check the processors used for the myclouds and most of then are affected. I didnt check every single processor yet but i checked enought

[image] dswv42: I have better things to do than be drawn into a pissing contest. No pissing contest, just a HUGE misunderstanding. Just to clarify: [image] dswv42: Getting access to the device, either local or remote, has been proven to be a trivial process… time and time again. As I hav…

Do not buy!

Legacy Products My Cloud OS 3

WD_MCH January 12, 2018, 11:23pm 58

I just wanted to update you all on this issue. We have released a new FW available today for manual download and installation. It will be available for pushed OTA FW update next week. Please see the post below.

Topic		Replies	Views
Latest firmware still vulnerable My Cloud OS 3	330	45978	March 11, 2018
Endgadet warns about security problem My Cloud OS 3	25	7852	March 20, 2017
My ISP reported an issue with My Cloud My Cloud OS 3	32	7034	February 20, 2017
Big access control / security problems with safepoints My Cloud OS 3	22	4686	July 27, 2016
MyCloud Geräte hackbar NAS und Personal Cloud	51	10608	July 13, 2017

Still Need Help?

Reach out to Support for more assistance.

Call Us

Email Us

Sign in to Your Support Account

Get up-to-date information about your products.

Western Digital Business Portal

Unlock benefits and tools for your business such as enterprise support, pricing and rebate tools, marketing, loyalty, rewards, and more.

Visit Business Portal

Do not buy!

Related topics

Still Need Help?

Sign in to Your Support Account

Western Digital Business Portal