Yep, which is why the rest of that sentence that you quoted stated; “… some of which were eventually patched by WD.” Some vulnerabilities were patched some not. As we all know, it has been a long running issue on the OS3 firmware that some security vulnerabilities remain unpatched or that it took WD a very long time to issue a patch through a firmware update.
OS3 is essentially dead at this point and any existing vulnerabilities will likely (for now) remaining unpatched by WD. WD had stated previously in this WD product security link about OS5:
https://www.westerndigital.com/support/productsecurity/wdc-21004-recommended-upgrade-to-mycloud-os-5
We will not provide any further security updates to the My Cloud OS3 firmware. We strongly encourage moving to the My Cloud OS5 firmware. If your device is not eligible for upgrade to My Cloud OS 5, we recommend that you upgrade to one of our other My Cloud offerings that support My Cloud OS 5. More information can be found here: https://shop.westerndigital.com/support/software/my-cloud-os
There was some discussion last week about the My Book Live security vulnerability in the OS3 My Cloud subforum. At that time, a WizCase article (WizCase Report: Vulnerabilities found on WD My Book, NetGear Stora, SeaGate Home, Medion LifeCloud NAS) hinted that My Cloud devices were possibly impacted but gave no firm details on My Cloud specifics.
