New Release - My Cloud Firmware Versions 2.30.193 (05/17/2018)


#1

WD is happy to announce the release of the My Cloud Firmware Update 2.30.193 for

  • My Cloud
  • My Cloud Mirror Gen2
  • My Cloud EX2 Ultra
  • My Cloud EX2100/EX4100
  • My Cloud DL2100/DL4100
  • My Cloud PR2100/PR4100

What’s new!

Updates to enable compliance with EU privacy regulations.

#2

That’s a bit vague, and links to the firmware for each affected model would be nice.

Exactly what “updates” are we talking about? I took a chance and updated to the “new” firmware, but the only difference I see is a nag screen about an updated privacy policy. Personally, I’d like to see some hardened security and the complete removal of all analytics processes, with true open source firmware as proof.


Firmware 2.30.193
#3

@dswv42

We all know that will NEVER happen!!!

Cheers,

JediNite


#4

At least not with this firmware version.

Out of curiosity, I extracted the root filesystem (image.cfs) from the 2.30.193 firmware bin file and used WinMerge to do a full comparison with firmware version 2.30.181. As I suspected, no significant changes appear to have been made.

Here are the results, showing files that are different.

\usrsbin\chk_fw_ver
\usrsbin\e2igrow
\default\config.xml
\language\cs-CZ\english_cs-cz.xml
\language\de-DE\english_de-de.xml
\language\en-US\english_en-us.xml
\language\es-ES\english_es-es.xml
\language\fr-FR\english_fr-fr.xml
\language\hu-HU\english_hu-hu.xml
\language\it_IT\english_it-it.xml
\language\ja-JP\english_ja-jp.xml
\language\ko-KR\english_ko-kr.xml
\language\nl-NL\english_nl-nl.xml
\language\no-NO\english_no-no.xml
\language\pl-PL\english_pl-pl.xml
\language\pt-BR\english_pt-br.xml
\language\ru-RU\english_ru-RU.xml
\language\sv-SE\english_sv-se.xml
\language\tr-TR\english_tr-tr.xml
\language\zh-CN\english_zh-cn.xml
\language\zh-TW\english_zh-tw.xml
\script\system_init
\web\pages\function\init.js
\web\pages\jquery\alerts\jquery.alerts.js
\web\pages\dashboard.php
\web\pages\index.php

Firmware 2.30.193
#5

mp3 and videos aren’t be able to play as before. what happened?


#6

@Larry.F
Can you provide more details please?

  • How are you attempting to play movies and mp3?

#7

usually i just open my iSO app on iPhone and select the file, if that’s mp3 mpa, it will play music under mycloud, then if that’s mp4 mov mkv then it will load VLC to play the video, and they were still ok before i update the app from app-store. just right after the update, audios just unable to play media file, also the videos aren’t able to play anymore.


#8

@Larry.F I just deleted and downloaded My Cloud App for iOS on my iPhone 8 and movie and video play as expected. You may want to:

  • reboot your PR unit
  • close and open the app

#9

I deleted the app and reinstalled it on my phone but still not able to play, so I think I will reboot the unit when I get home.

Will update the result, thank you SBrown


#10

Well don’t shoot the messenger (:pie: @SBrown). I figured a compliance change would just involve reworded legal statements and @dswv42’s breakdown seems to confirm that.


#11

that worked like before after doing what you’ve told. thank you very much sbrown


#12

Do you think one of those .PHP files solves this vulnerability?
Nessus plugin name:
Portable SDK for UPnP Devices (libupnp) < 1.6.18 Multiple Stack-based Buffer Overflows RCE

Vuln Solution:
Upgrade to libupnp version 1.6.18 or later. If libupnp is used as a third party by a different application, contact the vendor of that application


#13

Not likely (there are known issues with 1.6.21 as well, UPnP has always been a security headache), but if you are curious to test your own box, there is a Metasploit module that could be tested against previous firmware. D-Link had this issue, and we learned earlier this year about the shared code between D-Link DNS-320L and the MyCloud family :zipper_mouth_face:.

Edit: Current firmware seems to be using libupnp built with version 1.6.6 (thanks to @Tfl for teaching me the joys of ldd and similar tools :slight_smile:).


#14

My WD Cloud EX2 Ultra does not sleep any more after this update. I have not made any changes in the settings. What can I do to restore automatic sleeping?