WD MyCloud Mirror Gen 2: Affected?

[Bill_S]

You probably didn’t see the edit I added to the original announcement I made in the “My Cloud “Login Bypass” Vulnerability (3/7/17)” topic, but here it is below. There is no mistake in the firmware versions. Your update is on the way.

@Bill_S

In addition to the login bypass issue we addressed earlier and which was reported by both Steven Campbell and exploitee.rs, we have architected a solution to the new login bypass identified by exploitee.rs. We are currently internally testing this solution and anticipate it will be released soon. That release also will contain scheduled fixes, including for the unauthenticated command injection issues previously and responsibly identified by security researchers SEC Consult and Securify and recently disclosed by exploitee.rs.