Another day, another WD security hole

Another day, another WD security hole

A hacker could potentially brick your NAS The researchers found that they could get into a Cloud OS 3 device by remotely updating it with modified firmware. The firmware update functionality is meant to be accessible only to authenticated users, but they were able to get around that because the NAS seemingly has a user on it with a blank password, which they were able to use to authenticate in some cases.

There’s also the possibility that some users won’t be able to upgrade to Cloud OS 5. According to WD’s supported devices page, the updated software isn’t available for the MyCloud EX2, EX4, or certain versions of the My Cloud and My Cloud Mirror. If you own a device that can’t be updated to Cloud OS 5, WD’s advice is to upgrade to one that can. The other option, according to a statement WD gave to Comparitech last year, is to turn off remote dashboard access to the device. Their version of the exploit allows them to carry out commands on the NAS, but other versions could be used for any number of nefarious purposes. Also, because the hack exploits the firmware update function, a hacker could purposefully or even accidentally brick the device. The researchers have built their own custom security patch, but it has to be re-applied to the device every time it reboots. You can see more details about it in a video they made explaining the exploit.

While the vulnerability found by the researchers seems especially egregious, it may not be the only one out there — WD’s post recommending people upgrade to Cloud OS 5 says that it defends against entire classes of attacks. With that in mind, if you own a device that can’t run the new OS, it’s probably time to think about an upgrade, either to one of WD’s new devices, or to another NAS option.

The News Highlights

  • Another day, another WD security hole
  • Check the latest world news updates and information about business, finance, technology and more.
  • Check the latest update on tech news
Disclaimer: If you need to edit or update this news from compsmag then kindly contact us Learn more

For Latest News Follow us on Google News


Latest Headlines
  • Show all
  • Trending News
  • Popular By week
Holton Community Hospital celebrates new Covid-19 memorial
Holton Community Hospital celebrates new Covid-19 memorial
Bratcher didn’t want to make the memorial just about her husband, but rather about the community as a whole. More than 20 painted stones were placed at the ...
Grid Studio is bringing framed Apple, Nintendo, and Sony nostalgia to your walls in a variety of ways
Grid Studio is bringing framed Apple, Nintendo, and Sony nostalgia to your walls in a variety of ways
Advertisement A company by the name of Grid Studio has been lovingly taking apart certain devices and placing them into picture frames for customers to hang ...
Live COVID Updates: Scott Morrison Says Anti-Lockdown Protests “Have No Purpose”, NSW Records Two More Deaths on COVID-19
Live COVID Updates: Scott Morrison Says Anti-Lockdown Protests “Have No Purpose”, NSW Records Two More Deaths on COVID-19
Press conference: Watch back here or read more here Case numbers: 141 local cases (65 in isolation for entire infectious period, 24 in isolation for part of ...
Latest: Germany warns unvaccinated may face restrictions
Latest: Germany warns unvaccinated may face restrictions
Braun said getting vaccinated is important to protect against severe disease and because “vaccinated people will definitely have more freedoms than ...
Kentucky’s financial services industry faced turmoil in 2020;  DFI releases annual report
Kentucky’s financial services industry faced turmoil in 2020; DFI releases annual report
• Investment activity continued to flourish in Kentucky, with almost 6,000 company filings, including initial filings, renewals, notice filings and claims of ...
Doctors warn of slightly different symptoms with the delta variant of COVID
Doctors warn of slightly different symptoms with the delta variant of COVID
“The delta variant has slightly different symptoms compared to the original virus. You may not get the loss of taste & smell. The delta variant could cause ...
Shanghai cancels flights as China prepares for typhoon In-fa
Shanghai cancels flights as China prepares for typhoon In-fa
The typhoon earlier dumped rain on Taiwan and knocked down tree branches but no deaths or injuries were reported. It was packing sustained winds of 155 ...
The NVIDIA GeForce RTX 40 Series GPUs will be made in a 5nm Ada Lovelace process
The NVIDIA GeForce RTX 40 Series GPUs will be made in a 5nm Ada Lovelace process
NVIDIA GeForce RTX 40 Series Graphics Cards To Feature 5nm Ada Lovelace GPUs, Rumor Alleges Greymon55 states that NVIDIA will be launching its GeForce RTX 40 ...
MacKenzie Scott’s philanthropy is a post-pandemic push for the LA arts
MacKenzie Scott’s philanthropy is a post-pandemic push for the LA arts
MacKenzie Scott has given away $8.5bn since her divorce from Amazon founder Jeff Bezos © FilmMagic/Getty Images Since her 2019 divorce, Scott, who was ...
The MSU Bulldogs Championship is homerun for fan merchandise
The MSU Bulldogs Championship is homerun for fan merchandise
During an average month, Maroon & Co. makes about $55,000, Gomez said. But since June 30, the store has raked in more than $500,000 in apparel sales. The ...
Show next
Compsmag - Latest News from tech, business and health
Logo