'I am admin' bug turns WD's My Cloud boxes into Everyone's Cloud

[tempaccount]

Shocking enough this is already known publicly since March 2017 or even longer including various PoCs

Exploitee.rs » Blog Archive » Hacking the Western Digital MyCloud NAS (Login Bypass)
Western Digital MyCloud - Exploitee.rs

Not talking about all the other currently publicly known and unfixed vulns:

Vulnerabilities in Twonky e.g. exposes dir and filenames on HDD root (CVE-2018-7171, CVE-2018-7203)

Recently two CVEs CVE-2018-7171 and CVE-2018-7203 have been published where one can be exploited with tools like sharingIsCaring/twonky.py at master · mechanico/sharingIsCaring · GitHub to get access to the name of session files stored on the filesystem and to misuse it to login into the device. I have verified the CVE-2018-7171 with the twonky.py linked above and can confirm that Twonky 7.2.9-6 shipped with the My Cloud Mirror Gen1 in Firmware version 2.11.169 (01/12/18) is affected by th…

https://community.wd.com/t/security-vulnerability-cve-2016-6255-in-libupnp-allows-file-upload/176448

Vulnerability- Old version Portable SDK for UPnP Devices (libupnp- v 1.6.6) running on host

Hello…I am currently running the latest firmware (2.30.172) for MyCloud. I just came across a critical vulnerability as I was running vulnerability scanner on my LAN. Issue seems to be with the version of the Portable SDK for UPnP Devices (libupnp) installed on device possibly through the firmware. According to the scanner, currently installed libupnp version is 1.6.6 while most up-to-date and patched version is 1.6.18. Wanted to check if WD is aware if this issue and of there is any fix planne…

Edit

My Cloud "Authentication Bypass" 09/21/2018

Update 9/21/18: The issue stated below concerning an authentication bypass vulnerability has been addressed with a hotfix that can be immediately downloaded here: https://support.wdc.com/knowledgebase/answer.aspx?ID=25952&s The original information appears below. https://blog.westerndigital.com/western-digital-my-cloud-update/ Recently, security researcher Securify published an authentication bypass vulnerability for our My Cloud products (My Cloud Home is exempt from the vulnerability)…