Lance, can I suggest that it might be an idea for WD to post a sticky thread on the relevant sub-forums, identifying the status of disclosed CVEs, their exploit risk, and suggested mitigations, and in what firmware CVE vulnerabilities have been closed.
At the moment, all we have to go on is vague statements in the firmware release notes, which rarely identify specific CVEs.
