3 ms·
Afaik their accessible remotely over the internet via the WD MyCloud was just a custom daemon running in the background on the device. Suspect there was a remo
by tibbydudeza 5y ago
Afaik their accessible remotely over the internet via the WD MyCloud was just a custom daemon running in the background on the device.
Suspect there was a remote backdoor most likely for tech support.
- tibbydudeza 5y agoEven worse it was a known CVE - the firmware update was in 2015. Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/language_configuration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the wild in June 2021 for factory reset commands.