Results 1 to 6 of 6

Thread: Western Digital My Cloud passwords "easy" to bypass

  1. #1
    HEXUS.admin
    Join Date
    Apr 2005
    Posts
    28,104
    Thanks
    0
    Thanked
    1,844 times in 627 posts

    Western Digital My Cloud passwords "easy" to bypass

    Easy remote exploit bug remains unfixed, despite notifications to WD since April 2017.
    Read more.

  2. #2
    Member
    Join Date
    May 2006
    Location
    Melksham, Wiltshire
    Posts
    124
    Thanks
    3
    Thanked
    6 times in 5 posts
    • mark_a_scott's system
      • Motherboard:
      • Asus RoG Rampage V Edition 10
      • CPU:
      • Intel Core i7 6950X
      • Memory:
      • Corsair Dominator DDR4-2400 128GB
      • Storage:
      • 512GB Samsung 950 Pro M2, 2TB Samsung 850 Evo, 2x 6TB WD Green, Blu-Ray Writer, DVD Writer
      • Graphics card(s):
      • 2x eVGA GTX980Ti 6GB in SLI
      • PSU:
      • Corsair 850w
      • Case:
      • Corsair Obsidian 800D
      • Operating System:
      • Windows 10 x64
      • Monitor(s):
      • Philips BDM4065UC 40" 4K
      • Internet:
      • Virgin Media Vivid 200Mb/s

    Re: Western Digital My Cloud passwords "easy" to bypass

    The UI screenshot contains a public IP address in the address bar.

  3. #3
    Senior Member
    Join Date
    May 2014
    Posts
    1,066
    Thanks
    68
    Thanked
    143 times in 96 posts

    Re: Western Digital My Cloud passwords "easy" to bypass

    Lol, it's like takeaway companies that are 10 minutes late and you call them and they say "driver has just left and will be with you shortly!"

    Sounds like they had done nothing until it had been publicised, how silly.

  4. Received thanks from:

    Jonj1611 (21-09-2018)

  5. #4
    HEXUS.Squirrel Output's Avatar
    Join Date
    Nov 2007
    Posts
    1,598
    Thanks
    658
    Thanked
    290 times in 219 posts
    • Output's system
      • Motherboard:
      • Biostar TA970
      • CPU:
      • AMD FX-8350
      • Memory:
      • 8GB (2x4GB) DDR3 Patriot 1866MHz @ 1600MHz + 8GB (2x4GB) DDR3 HyperX Fury 1600MHz
      • Storage:
      • Sandisk Ultra 3D 2TB
      • Graphics card(s):
      • Gigabyte R9 270
      • PSU:
      • Corsair VX450
      • Case:
      • Xclio Touch 787
      • Operating System:
      • Windows 7 x64
      • Monitor(s):
      • 2 x Dell P2214H

    Re: Western Digital My Cloud passwords "easy" to bypass

    It's always disappointing to see when companies take their time on fixing serious security issues like this, when it should be considered essential to rectify as quickly as possible.

    But obviously this is the reason that public disclosure exists, to force them into it if it hasn't been done in a reasonable timeframe. The fact that they were given more than three times the standard 90 days, only to still fail to do anything proves the point even more.
    Last edited by Output; 22-09-2018 at 02:09 AM.

  6. #5
    Admin team peterb's Avatar
    Join Date
    Aug 2005
    Location
    Southampton
    Posts
    18,967
    Thanks
    2,717
    Thanked
    3,265 times in 2,588 posts
    • peterb's system
      • Motherboard:
      • Nascom 2
      • CPU:
      • Z80B
      • Memory:
      • 48K 8 bit memory on separate card
      • Storage:
      • Audio cassette tape - home built 5.25" floppy drive
      • Graphics card(s):
      • text output (composite video)
      • PSU:
      • Home built
      • Case:
      • Home built
      • Operating System:
      • Nas-sys
      • Monitor(s):
      • 12" monocrome composite video input
      • Internet:
      • No networking capability on this machine

    Re: Western Digital My Cloud passwords "easy" to bypass

    Quote Originally Posted by mark_a_scott View Post
    The UI screenshot contains a public IP address in the address bar.
    And the clue is public and if you do a whois - you will find some details - how much use they will be though...
    (\__/)
    (='.'=)
    (")_(")

    Been helped or just 'Like' a post? Use the Thanks button!
    My broadband speed - 750 Meganibbles/minute

  7. #6
    Senior Member
    Join Date
    Nov 2014
    Location
    Redditch, United Kingdom
    Posts
    314
    Thanks
    7
    Thanked
    9 times in 6 posts
    • aniilv's system
      • Motherboard:
      • Gigabyte B85
      • CPU:
      • i5-4570
      • Memory:
      • 8GB
      • Storage:
      • 160GB Raptor 10k rpm
      • Graphics card(s):
      • MSI 760GTX 2GB
      • PSU:
      • 550W Gigabyte
      • Case:
      • Antec
      • Operating System:
      • Win 7

    Re: Western Digital My Cloud passwords "easy" to bypass

    Why would you ever allow remote access IF you care about someone else accessing your data?

    tbh any device should come with plain warning - "enabling remote access makes device vulnerable"

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •