We had a bit of a debate about this on the EX2 side as well.
http://community.wd.com/t5/WD-My-Cloud-EX2/BASH-or-ASH-Bad-News-Security-Bug/td-p/800561
Our conclusiopn is that since “BASH” is not the DEFAULT shell “ASH” is the default shell, then we aren not vulnerble to this bug. Follow the thread for more info.
Make no mistake, our copy of BASH should be patched, but it’s not super critical.
