WD My Cloud NAS devices have hard-wired backdoor


#1

From The Register: https://www.theregister.co.uk/2018/01/08/wd_mycloud_nas_backdoor/

“If you have a Western Digital My Cloud network attached storage device, it’s time to learn how to update its OS because researcher James Bercegay has discovered a dozen models possess a hard-coded backdoor.”


CVE-2017-17560 - Western Digital MyCloud - 'multi_uploadify' File Upload (Metasploit)
#2

Hi gurple,

Previously reported security vulnerabilities related to certain My Cloud products had been disclosed by a security researcher directly with our team in 2017, and critical issues mentioned in these recent articles (gulftech.org; thehackernews.com) were addressed in 2017 with firmware update v2.30.172 and above. Other issues are being addressed in future updates.

For more details, please visit our blog https://blog.westerndigital.com/western-digital-cloud-update