Results 1 to 6 of 6

Thread: Western Digital My Cloud passwords "easy" to bypass

  1. #1
    HEXUS.admin
    Join Date
    Apr 2005
    Posts
    27,514
    Thanks
    0
    Thanked
    1,700 times in 589 posts

    Western Digital My Cloud passwords "easy" to bypass

    Easy remote exploit bug remains unfixed, despite notifications to WD since April 2017.
    Read more.

  2. #2
    Member
    Join Date
    May 2006
    Location
    Melksham, Wiltshire
    Posts
    119
    Thanks
    3
    Thanked
    6 times in 5 posts
    • mark_a_scott's system
      • Motherboard:
      • Asus RoG Rampage V Edition 10
      • CPU:
      • Intel Core i7 6950X
      • Memory:
      • Corsair Dominator DDR4-2400 128GB
      • Storage:
      • 512GB Samsung 950 Pro M2, 2TB Samsung 850 Evo, 2x 6TB WD Green, Blu-Ray Writer, DVD Writer
      • Graphics card(s):
      • 2x eVGA GTX980Ti 6GB in SLI
      • PSU:
      • Corsair 850w
      • Case:
      • Corsair Obsidian 800D
      • Operating System:
      • Windows 10 x64
      • Monitor(s):
      • Philips BDM4065UC 40" 4K
      • Internet:
      • Virgin Media Vivid 200Mb/s

    Re: Western Digital My Cloud passwords "easy" to bypass

    The UI screenshot contains a public IP address in the address bar.

  3. #3
    Senior Member
    Join Date
    May 2014
    Posts
    818
    Thanks
    52
    Thanked
    105 times in 68 posts

    Re: Western Digital My Cloud passwords "easy" to bypass

    Lol, it's like takeaway companies that are 10 minutes late and you call them and they say "driver has just left and will be with you shortly!"

    Sounds like they had done nothing until it had been publicised, how silly.

  4. Received thanks from:

    Jonj1611 (21-09-2018)

  5. #4
    HEXUS.Squirrel Output's Avatar
    Join Date
    Nov 2007
    Posts
    1,505
    Thanks
    637
    Thanked
    266 times in 206 posts
    • Output's system
      • Motherboard:
      • Biostar TA970
      • CPU:
      • AMD FX-8350
      • Memory:
      • 8GB (2x4GB) DDR3 Patriot 1866MHz @ 1600MHz + 8GB (2x4GB) DDR3 HyperX Fury 1600MHz
      • Graphics card(s):
      • Gigabyte R9 270
      • PSU:
      • Corsair VX450
      • Case:
      • Xclio Touch 787
      • Operating System:
      • Windows 7 x64
      • Monitor(s):
      • 2 x Dell P2214H

    Re: Western Digital My Cloud passwords "easy" to bypass

    It's always disappointing to see when companies take their time on fixing serious security issues like this, when it should be considered essential to rectify as quickly as possible.

    But obviously this is the reason that public disclosure exists, to force them into it if it hasn't been done in a reasonable timeframe. The fact that they were given more than three times the standard 90 days, only to still fail to do anything proves the point even more.
    Last edited by Output; 22-09-2018 at 02:09 AM.

  6. #5
    “High End” Admin peterb's Avatar
    Join Date
    Aug 2005
    Location
    Southampton
    Posts
    18,565
    Thanks
    2,570
    Thanked
    3,120 times in 2,486 posts
    • peterb's system
      • Motherboard:
      • Nascom 2
      • CPU:
      • Z80B
      • Memory:
      • 48K 8 bit memory on separate card
      • Storage:
      • Audio cassette tape - home built 5.25" floppy drive
      • Graphics card(s):
      • text output (composite video)
      • PSU:
      • Home built
      • Case:
      • Home built
      • Operating System:
      • Nas-sys
      • Monitor(s):
      • 12" monocrome composite video input
      • Internet:
      • No networking capability on this machine

    Re: Western Digital My Cloud passwords "easy" to bypass

    Quote Originally Posted by mark_a_scott View Post
    The UI screenshot contains a public IP address in the address bar.
    And the clue is public and if you do a whois - you will find some details - how much use they will be though...
    (\__/)
    (='.'=)
    (")_(")

    Been helped or just 'Like' a post? Use the Thanks button!
    My broadband speed - 750 Meganibbles/minute

  7. #6
    Senior Member
    Join Date
    Nov 2014
    Location
    Redditch, United Kingdom
    Posts
    302
    Thanks
    7
    Thanked
    9 times in 6 posts
    • aniilv's system
      • Motherboard:
      • Gigabyte B85
      • CPU:
      • i5-4570
      • Memory:
      • 8GB
      • Storage:
      • 160GB Raptor 10k rpm
      • Graphics card(s):
      • MSI 760GTX 2GB
      • PSU:
      • 550W Gigabyte
      • Case:
      • Antec
      • Operating System:
      • Win 7

    Re: Western Digital My Cloud passwords "easy" to bypass

    Why would you ever allow remote access IF you care about someone else accessing your data?

    tbh any device should come with plain warning - "enabling remote access makes device vulnerable"

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •