Latest firmware still vulnerable

[tempaccount]

With new reports like:

Critical Unpatched Flaws Disclosed In Western Digital 'My Cloud' Storage Devices

http://gulftech.org/advisories/WDMyCloud%20Multiple%20Vulnerabilities/125

Major Backdoor affecting several My Cloud devices

I came across this story today about a major security concern for My Cloud devices. This backdoor allows root access through the internet: Uses username mydlinkBRionyg and password abc12345cba and apparently has not been patched, despite being known for over 6 months. When will this be patched, and what is the official recommendation until it has been patched to keep our data secure?

Same hardcoded backdoor & security holes in WDMyCloud devices

http://gulftech.org/advisories/WDMyCloud%20Multiple%20Vulnerabilities/125 https://www.reddit.com/r/netsec/comments/7o1008/same_hardcoded_backdoor_in_both_wdmycloud_and/ Yes WD. You dont patch a lot of security holes and even backdoor sinde June 2017! Now what?

coming in i would suggest to fully disable remote access to the device and to prevent access by untrusted systems/users to the device from within your local network.