Year-old vulnerability in WD My Cloud NAS still not patched

Originally published at:

Western Digital has not still not patched a year old vulnerability in its My Cloud service, that allows users to access files on their NAS at home over the internet. Through the vulnerability, an attacker can bypass the authentication of the device and login as administrator without requiring a password.

One reason I never go Cloud… don’t trust it and know it will never be updated because why should they.