New Release - My Cloud Firmware Version 2.31.183 (05/20/2019)

WD is happy to announce the release of My Cloud Firmware 2.31.183 for manual download and limited auto-update (phased rollout) on 05/20 at https://support.wdc.com for the following My Cloud products.

  • My Cloud
  • My Cloud Mirror Gen2
  • My Cloud EX2 Ultra
  • My Cloud EX2100
  • My Cloud EX4100
  • My Cloud DL2100
  • My Cloud DL4100
  • My Cloud PR2100
  • My Cloud PR4100

What’s new!

Security Fixes

  • Apache updated to version 2.4.38 (CVE-2019-0211).
  • Webfile viewer disabled for non-admin users (CVE-2019-9949).
  • Removed remember-me mechanism from login page.
  • Resolved authenticated arbitrary file operation and authenticated command injection vulnerabilities.
  • Added protection against file path traversal.
  • Resolved authentication bypass vulnerability.
  • Mitigation added for user session hijacking.
  • Added protection against cookie modification vulnerabilities.

Other Bug Fixes

  • Resolved storage key upload error

Notable KBA:

Please reference this KBA Answer ID 25490 My Cloud Firmware Up To Date but Newer Version Available for Download

1 Like