If you are running a My Cloud device, you need to be aware of this.
Many Western Digital ‘My Cloud’ Devices Have Backdoor
Researchers have found a major security flaw in many of Western Digital ‘My Cloud” devices.
These devices have a published backdoor.
The backdoor user ID is mydlinkBRionyg with the password abc12345cba.
The devices effected are: MyCloud, MyCloudMirror, My Cloud Gen 2, My Cloud PR2100, My Cloud PR4100, My Cloud EX2 Ultra, My Cloud EX2, My Cloud EX4, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100 and My Cloud DL4100.
Western Digital has released firmware version 2.30.172 which reportedly fixes the bug. The My Cloud product line is typically not sold by Quanexus, buy many of you may have purchased one of these devices for home.
If you are running a My Cloud device, it is very important that you update the Firmware.
The Quanexus Security Team
Follow us on Facebook, Twitter and LinkedIn and stay up to date on Hacks, Attacks & Cybersecurity by subscribing to our email list.