Critical Unpatched Flaws Disclosed In Western Digital 'My Cloud' Storage Devices

[drlucky]

some of the issue that article is reporting on were patched in the last two FW releases. You may need to manually update the FW if it has not yet been pushed to your device. There are stickies at the top of each board with the latest FW release.

here is the My Cloud FW thread

New Release - My Cloud Firmware Versions 4.05.00-320 (11/28/17) & 2.30.181 (01/12/18)

WD is happy to announce the release of the My Cloud Firmware Update 4.05.00-320 & 2.30.181. Current FW version 2.30.181 Release Notes Resolved Issues: Resolved security vulnerability (CVE-2017-17560) - Unauthorized access to multipart upload functionality. Previous FW versions 2.30.172 Release Notes Resolved Issues: Resolved SMB server (samba) security vulnerability (CVE-2017-7494) - Malicious clients can upload and cause the SMB server to execute a shared library from a writable share…