Results 1 to 6 of 6

Thread: Western Digital My Cloud passwords "easy" to bypass

  1. #1
    HEXUS.admin
    Join Date
    Apr 2005
    Posts
    28,912
    Thanks
    0
    Thanked
    1,865 times in 638 posts

    Western Digital My Cloud passwords "easy" to bypass

    Easy remote exploit bug remains unfixed, despite notifications to WD since April 2017.
    Read more.

  2. #2
    Member
    Join Date
    May 2006
    Location
    Melksham, Wiltshire
    Posts
    128
    Thanks
    3
    Thanked
    7 times in 6 posts
    • mark_a_scott's system
      • Motherboard:
      • Asus RoG Rampage V Edition 10
      • CPU:
      • Intel Core i7 6950X
      • Memory:
      • Corsair Dominator DDR4-2400 128GB
      • Storage:
      • 512GB Samsung 950 Pro M2, 2TB Samsung 850 Evo, 2x 6TB WD Green, Blu-Ray Writer, DVD Writer
      • Graphics card(s):
      • 2x eVGA GTX980Ti 6GB in SLI
      • PSU:
      • Corsair 850w
      • Case:
      • Corsair Obsidian 800D
      • Operating System:
      • Windows 10 x64
      • Monitor(s):
      • Philips BDM4065UC 40" 4K
      • Internet:
      • Virgin Media Vivid 200Mb/s

    Re: Western Digital My Cloud passwords "easy" to bypass

    The UI screenshot contains a public IP address in the address bar.

  3. #3
    Senior Member
    Join Date
    May 2014
    Posts
    1,464
    Thanks
    89
    Thanked
    196 times in 140 posts

    Re: Western Digital My Cloud passwords "easy" to bypass

    Lol, it's like takeaway companies that are 10 minutes late and you call them and they say "driver has just left and will be with you shortly!"

    Sounds like they had done nothing until it had been publicised, how silly.

  4. Received thanks from:

    Jonj1611 (21-09-2018)

  5. #4
    HEXUS.Squirrel Output's Avatar
    Join Date
    Nov 2007
    Posts
    1,658
    Thanks
    668
    Thanked
    301 times in 225 posts
    • Output's system
      • Motherboard:
      • Biostar TA970
      • CPU:
      • AMD FX-8350
      • Memory:
      • 8GB (2x4GB) DDR3 Patriot 1866MHz @ 1600MHz + 8GB (2x4GB) DDR3 HyperX Fury 1600MHz
      • Storage:
      • Sandisk Ultra 3D 2TB
      • Graphics card(s):
      • Gigabyte RX Vega 56 Gaming OC 8GB
      • PSU:
      • EVGA G3 750
      • Case:
      • Xclio Touch 787
      • Operating System:
      • Windows 7 x64
      • Monitor(s):
      • 2 x Dell P2214H

    Re: Western Digital My Cloud passwords "easy" to bypass

    It's always disappointing to see when companies take their time on fixing serious security issues like this, when it should be considered essential to rectify as quickly as possible.

    But obviously this is the reason that public disclosure exists, to force them into it if it hasn't been done in a reasonable timeframe. The fact that they were given more than three times the standard 90 days, only to still fail to do anything proves the point even more.
    Last edited by Output; 22-09-2018 at 02:09 AM.

  6. #5
    Admin team peterb's Avatar
    Join Date
    Aug 2005
    Location
    Southampton
    Posts
    19,381
    Thanks
    2,892
    Thanked
    3,403 times in 2,693 posts
    • peterb's system
      • Motherboard:
      • Nascom 2
      • CPU:
      • Z80B
      • Memory:
      • 48K 8 bit memory on separate card
      • Storage:
      • Audio cassette tape - home built 5.25" floppy drive
      • Graphics card(s):
      • text output (composite video)
      • PSU:
      • Home built
      • Case:
      • Home built
      • Operating System:
      • Nas-sys
      • Monitor(s):
      • 12" monocrome composite video input
      • Internet:
      • No networking capability on this machine

    Re: Western Digital My Cloud passwords "easy" to bypass

    Quote Originally Posted by mark_a_scott View Post
    The UI screenshot contains a public IP address in the address bar.
    And the clue is public and if you do a whois - you will find some details - how much use they will be though...
    (\__/)
    (='.'=)
    (")_(")

    Been helped or just 'Like' a post? Use the Thanks button!
    My broadband speed - 750 Meganibbles/minute

  7. #6
    Senior Member
    Join Date
    Nov 2014
    Location
    Redditch, United Kingdom
    Posts
    335
    Thanks
    7
    Thanked
    10 times in 7 posts

    Re: Western Digital My Cloud passwords "easy" to bypass

    Why would you ever allow remote access IF you care about someone else accessing your data?

    tbh any device should come with plain warning - "enabling remote access makes device vulnerable"

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •