WD mycloud security

Sorry this is I hope the best place to put this…seen a few people with mentions of having these devices.

Western Digital Releases Update for NAS Devices
(January 8, 2018)

Western Digital has released a firmware update to address a hardcoded backdoor in its MyCloud NAS devices. The update also addresses an unrestricted file upload vulnerability and a cross-site request forgery issue. Western Digital was alerted to the flaws in June 2017.

Editor’s Note

[Jake Williams]
There shouldn’t be a backdoor in a product like this and if one is found, it shouldn’t take months to remove the backdoor. Pay attention to vendor responses when evaluating your product decisions. Taking months to respond to this egregious vulnerability does not inspire confidence in WD’s software engineering and security practices.

1 Like