Well, it does not really matter if there is a documented attack vector - you could not be very confident having these things deployed until known vulnerbilities are addressed.
Firmware 02.43.09 - 038 (1/27/2015) now addresses Shellshock (CVE-2014-6271, CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187) bash security vulnerability. So that is good - albeit a very long time in coming! And I might add not soon enough given that I replaced our MyBookLives already on account of the delay!
Anyway, for what it is worth, I can report the new firmware installed without any hitches on a few of my MyBookLive and MyBookLive Duo’s.
