WD Cloud Zero Day vulnerabilities

Old news. If one uses the forum search feature, magnifying glass icon upper right, they’d see the security vulnerabilities mentioned in that link have been well discussed in several past discussions. Here are just three past discussions:

https://community.wd.com/t/latest-firmware-still-vulnerable/96743/

https://community.wd.com/t/endgadet-warns-about-security-problem/198086/

https://community.wd.com/t/any-plan-for-west-digital-to-fix-this-high-risk-for-mycloud-product/198200/

Bottom line is new firmware WAS previously release to deal with some (most or all) of the various security vulnerabilities mentioned back in March. However it isn’t clear if any of the companies who publicized the vulnerabilities have gone back and retested the My Cloud units with updated firmware to see if the vulnerabilities actually were plugged/fixed.

If you are concerned just disable remote access and ensure your local network is secure. As always ensure your My Cloud unit is updated to the latest firmware.