Hey you, get off of My Cloud! Western Digital hardwired backdoor is a golden oldie

Subject: General Tech | January 8, 2018 - 12:42 PM |
Tagged: western digital, My Cloud, security, D-Link, DNS-320L, NAS

A few years back the D-Link DNS-320L NAS device made headlines thanks to the discovery of a hardwired user and password present which allowed anyone access to your device.  Western Digital seems to have completely ignored that previous furor as it turns out they reused that same firmware, without the update D-Link provided years back, on a number of My Cloud devices.  As of now, if you are running any of the devices listed by The Register here with a firmware version below 4.x you are exposed.  If you can't find newer firmware, which may well be the case, you can use D-Link's 2.30.174 firmware patch on your My Cloud; as always back up anything you don't want to lose before doing a firmware update.

View Full Size

"If you have a Western Digital My Cloud network attached storage device, it's time to learn how to update its OS because researcher James Bercegay has discovered a dozen models possess a hard-coded backdoor."

Here is some more Tech News from around the web:

Tech Talk

Source: The Register

Video News


January 8, 2018 | 01:32 PM - Posted by LipidsForGreyWithTheDafts (not verified)

While CES rages on in the background that Meltdown/Spectre business needs to be watched and please feel free to delete this Post after you do a quick write-up on this issue below. There have been some systems borked by some patches and Woody's Defcon advice may be good advice to wait and see before patching too early and getting a little Blue Screen of Unhappiness.

"More stuff broken amid Microsoft's efforts to fix Meltdown/Spectre vulns"

https://www.theregister.co.uk/2018/01/08/meltdown_fix_security_problems/

January 9, 2018 | 09:38 PM - Posted by RealExascale (not verified)

I actually get the meme you used there...

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Lines and paragraphs break automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <blockquote><p><br>
  • Web page addresses and e-mail addresses turn into links automatically.

More information about formatting options

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.