WDC-21008 - clarification needed

The notification about the security vulnerability in internet-connected MyBookLive models that came out in June recommends “Immediately disconnect your My Book Live and My Book Live Duo from the Internet to protect your data from ongoing attacks.”

Does this mean:
(a) disable the remote access to the drive from the WAN (e.g. logging in from home to the drive at work - or vice versa); or
(b) disconnect the drive from the local network if it’s connected to the internet?

Option (b) would be incredibly disruptive.

Alternatively, does anyone know if there’s a particular port you can block on the router?



Western Digital has determined that Internet-connected My Book Live and My Book Live Duo devices are under attack by exploitation of multiple vulnerabilities present in the device.

You may access your My Book Live data when connected directly to a computer.

How to Access a My Book Live When Connected Directly to a Computer


Thank you.

So, whether or not the MyBookLiveDuo is configured for remote access, it can’t be connected to an internet-capable network.