In the meantime, Vermeulen said that there’s no fix and that users have to “just disconnect” the drive altogether if they want to keep their data safe. WD said that several of its My Cloud products are vulnerable - including the EX2, EX4 and Mirror, but not My Cloud Home.
#My cloud update#
“We are in the process of finalizing a scheduled firmware update that will resolve the reported issue,” a spokesperson said, which will arrive “within a few weeks.” The company confirmed that it knows of the vulnerability but did not say why it took more than a year to issue a fix. Normally, security researchers give 90 days for a company to respond, in line with industry-accepted responsible disclosure guidelines.Īfter he found that WD updated the My Cloud firmware in the meanwhile without fixing the vulnerability he found, he decided to post his findings.Ī year later, WD still hasn’t released a patch. Vermeulen reported the bug over a year ago, in April 2017, but said the company stopped responding. He posted a proof-of-concept video on Twitter.ĭetails of the bug were also independently found by another security team, which released its own exploit code. The bug was “easy” to exploit, Vermeulen told TechCrunch in an email, and was remotely exploitable if a My Cloud device allows remote access over the internet - which thousands of devices do. The exploit works because drive’s web-based dashboard doesn’t properly check a user’s credentials before giving a possible attacker access to tools that should require higher levels of access.
#My cloud password#
Remco Vermeulen found a privilege escalation bug in Western Digital’s My Cloud devices, which he said allows an attacker to bypass the admin password on the drive, gaining “complete control” over the user’s data. After the security assessment was completed, My Cloud functionality was restored.A security researcher has published details of a vulnerability in a popular cloud storage drive after the company failed to issue security patches for over a year. The suspension lasted for ten days, during which users were unable to remotely access files stored on their WD NAS devices. As a precautionary measure, the company temporarily suspended some services, including My Cloud, on April 2. On March 26, 2023, Western Digital encountered a cyberattack that led to unauthorized access to company systems and data theft. WD 4TB My Cloud Home Personal Cloud - WDBVXC0040HWT-NESN, Single Drive, White. Western Digital Western Digital provides applications that enable seamless interaction with My Cloud devices.
#My cloud android#
My Cloud is designed to be compatible with various platforms, including personal computers, Apple Macs, Android devices, and iOS devices. Compatibility and Applications My Cloud apps which comes pre-installed on all My Cloud devices. This operating system is proprietary, however, others have found the operating system to be Linux, with a graphical user interface, but also accessible. Moreover, some users have identified that the operating system is based on Linux, sporting user-friendly graphical user interface and SSH accessibility. It boasts a user-friendly graphical interface and offers customization options. The My Cloud OS, a proprietary operating system My Cloud OS ( operating system), is pre-installed on all My Cloud devices and facilitates management of the NASs. Depicted in the screenshot is the dashboard of My Cloud OS. My Cloud OS allows users of My Cloud NASs to control their My Cloud device. Use the My Cloud Home app on your phone, tablet or computer to access it anywhere without paying a. You own all your data, stored in the safety of your home. Cooling for the My Cloud system relies on fanless air convection. My Cloud Home is an easy-to-use personal cloud storage device that plugs directly into your Wi-Fi® router at home so you can preserve your digital life. The internal storage drive utilized is a WD Red 2 terabyte hard drive.
Additional hardware components include 256 megabytes of Samsung K4B2G1646E DDR3 random access memory and 512 kilobytes of Winbound 25X40CL flash memory. The gigabit Ethernet port is powered by a Broadcom BCM54612E Gigabit Ethernet transceiver. My Cloud employs a Mindspeed Comcerto 2000 dual-core ARM Cortex-A9 Communication processor running at 650 MHz. My Cloud devices are available in storage capacities of 2 terabytes, 3 terabytes, 4 terabytes, and 8 terabytes, with a higher-end model offering up to 16 terabytes. The My Cloud product line comprises personal network-attached storage (NAS) devices and multi-purpose servers, designed and marketed by Western Digital Corporation (WD).
0 kommentar(er)
