Results 1 to 6 of 6

Thread: Western Digital My Cloud passwords "easy" to bypass

  1. #1
    HEXUS.admin
    Join Date
    Apr 2005
    Posts
    31,709
    Thanks
    0
    Thanked
    2,073 times in 719 posts

    Western Digital My Cloud passwords "easy" to bypass

    Easy remote exploit bug remains unfixed, despite notifications to WD since April 2017.
    Read more.

  2. #2
    Member
    Join Date
    May 2006
    Location
    Melksham, Wiltshire
    Posts
    147
    Thanks
    3
    Thanked
    8 times in 7 posts
    • mark_a_scott's system
      • Motherboard:
      • Asus RoG Rampage V Edition 10
      • CPU:
      • Intel Core i7 6950X
      • Memory:
      • Corsair Dominator DDR4-2400 128GB
      • Storage:
      • 512GB Samsung 950 Pro M2, 2TB Samsung 850 Evo, 2x 6TB WD Green, Blu-Ray Writer, DVD Writer
      • Graphics card(s):
      • 2x eVGA GTX980Ti 6GB in SLI
      • PSU:
      • Corsair 850w
      • Case:
      • Corsair Obsidian 800D
      • Operating System:
      • Windows 10 x64
      • Monitor(s):
      • Philips BDM4065UC 40" 4K
      • Internet:
      • Virgin Media Vivid 200Mb/s

    Re: Western Digital My Cloud passwords "easy" to bypass

    The UI screenshot contains a public IP address in the address bar.

  3. #3
    Senior Member
    Join Date
    May 2014
    Posts
    2,385
    Thanks
    181
    Thanked
    304 times in 221 posts

    Re: Western Digital My Cloud passwords "easy" to bypass

    Lol, it's like takeaway companies that are 10 minutes late and you call them and they say "driver has just left and will be with you shortly!"

    Sounds like they had done nothing until it had been publicised, how silly.

  4. Received thanks from:

    Jonj1611 (21-09-2018)

  5. #4
    HEXUS.Squirrel Output's Avatar
    Join Date
    Nov 2007
    Posts
    2,220
    Thanks
    986
    Thanked
    437 times in 309 posts
    • Output's system
      • Motherboard:
      • Gigabyte AORUS Master X570
      • CPU:
      • AMD Ryzen 9 3950X
      • Memory:
      • 32GB (2x16GB) DDR4 Kingston Fury Renegade @ 3600MHz CL16
      • Storage:
      • Sandisk Ultra 3D 2TB
      • Graphics card(s):
      • Sapphire Nitro+ RX 7800 XT
      • PSU:
      • EVGA SuperNOVA 750 G3
      • Case:
      • bequiet Dark Base Pro 900 Rev.2
      • Operating System:
      • Windows 10 Pro x64

    Re: Western Digital My Cloud passwords "easy" to bypass

    It's always disappointing to see when companies take their time on fixing serious security issues like this, when it should be considered essential to rectify as quickly as possible.

    But obviously this is the reason that public disclosure exists, to force them into it if it hasn't been done in a reasonable timeframe. The fact that they were given more than three times the standard 90 days, only to still fail to do anything proves the point even more.
    Last edited by Output; 22-09-2018 at 02:09 AM.

  6. #5
    The late but legendary peterb - Onward and Upward peterb's Avatar
    Join Date
    Aug 2005
    Location
    Looking down & checking on swearing
    Posts
    19,378
    Thanks
    2,892
    Thanked
    3,403 times in 2,693 posts

    Re: Western Digital My Cloud passwords "easy" to bypass

    Quote Originally Posted by mark_a_scott View Post
    The UI screenshot contains a public IP address in the address bar.
    And the clue is public and if you do a whois - you will find some details - how much use they will be though...
    (\__/)
    (='.'=)
    (")_(")

    Been helped or just 'Like' a post? Use the Thanks button!
    My broadband speed - 750 Meganibbles/minute

  7. #6
    Senior Member
    Join Date
    Nov 2014
    Location
    Redditch, United Kingdom
    Posts
    434
    Thanks
    9
    Thanked
    17 times in 13 posts

    Re: Western Digital My Cloud passwords "easy" to bypass

    Why would you ever allow remote access IF you care about someone else accessing your data?

    tbh any device should come with plain warning - "enabling remote access makes device vulnerable"

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •