Home

Mar 8, 2017

Your WD networked drive is vulnerable to remote attacks


The My Cloud line has some conspicuous security holes.

Category:IT 

If you have one of Western Digital's My Cloud nstorage drives, you might be particularly vulnerable to internet attacks. Exploitee.rs has discovered a number of unpatched security flaws in most My Cloud models that let remote intruders bypass the login, insert their own commands and upload files without permission. In numerous cases, it's a matter of poorly implemented scripts. Also, every command exectued through the web interface has full access to the operating system -- an attacker would have the keys to the kingdom.
The kicker? WD did fix one login bypass flaw through a firmware update, but it introduced another in the process.

We've asked WD for its take on the situation and will let you know if it has a response. However, the Exploitee.rs team says it's revealing these pre-patch bugs to the public because of WD's "reputation within the community." Supposedly, the company doesn't pay attention to the seriousness of security flaws -- this open disclosure is a way of pressuring WD into action. True or not, you may not want to allow internet access to your My Cloud gear unless it's absolutely necessary.

authorarticle: Master3395

image: 

keywords: cloud, storage, MyCloud, vulnability

Previous Article
Next Article
Discord

Page 1 of 505  >  >>

Tekya Malware Targets 1 Million Android Users Through Malicious Apps On Play Store

android.jpg

Apr 2, 2020 | Category: Google | Comments

While Google employs some tough policies for app developers to keep the Play Store safe, yet it never remains so. Once again, criminal hackers managed to ditch Google’s policies and flood the Play Store with malicious Android apps.

This time, they target users with Tekya malware distributed via numerous apps with almost 1 million downloads.

read more…

Skype does NOT disappear

skype.webp

Apr 1, 2020 | Category: Microsoft | Comments

Microsoft refuses ... for the time.

read more…

Check out OnePlus 8! They will reveal on April 14

oneplus8.webp

Mar 31, 2020 | Category: General | Comments

Completely raw in black with HDR10 + and 120Hz.

read more…

Page 1 of 505  >  >>