- WESTERN DIGITAL MY PASSPORT 4TB MAKES BEEPING SOUND UPDATE
- WESTERN DIGITAL MY PASSPORT 4TB MAKES BEEPING SOUND PATCH
- WESTERN DIGITAL MY PASSPORT 4TB MAKES BEEPING SOUND UPGRADE
- WESTERN DIGITAL MY PASSPORT 4TB MAKES BEEPING SOUND SOFTWARE
Western Digital said it is aware of third parties offering security patches for My Cloud OS 3.
WESTERN DIGITAL MY PASSPORT 4TB MAKES BEEPING SOUND PATCH
In recognition of this, the researchers have developed and released their own patch that fixes the vulnerabilities they found in OS 3 (the patch needs to be reapplied each time the device is rebooted). “So some users might not decide to migrate to OS 5.” “It broke a lot of functionality,” Domanski said of OS 5. More information can be found here.” A list of M圜loud devices that can support OS 5 is here.īut according to Domanski, OS 5 is a complete rewrite of Western Digital’s core operating system, and as a result some of the more popular features and functionality built into OS3 are missing.
WESTERN DIGITAL MY PASSPORT 4TB MAKES BEEPING SOUND UPGRADE
“If your device is not eligible for upgrade to My Cloud OS 5, we recommend that you upgrade to one of our other My Cloud offerings that support My Cloud OS 5. “We strongly encourage moving to the My Cloud OS5 firmware,” the statement reads. A statement published on its support site Masays the company will no longer provide further security updates to the M圜loud OS 3 firmware. Western Digital ignored questions about whether the flaw found by Domanski and Ribeiro was ever addressed in OS 3. We take reports from the security research community very seriously and conduct investigations as soon as we receive them.” Since then, we have updated our process and respond to every report in order to avoid any miscommunication like this again. “We didn’t have any questions so we didn’t respond. “The communication that came our way confirmed the research team involved planned to release details of the vulnerability and asked us to contact them with any questions,” Western Digital said. In a statement provided to KrebsOnSecurity, Western Digital said it received their report after Pwn2Own Tokyo 2020, but that at the time the vulnerability they reported had already been fixed by the release of My Cloud OS 5. The researchers said Western Digital never responded to their reports.
WESTERN DIGITAL MY PASSPORT 4TB MAKES BEEPING SOUND UPDATE
Nevertheless, in February 2021, the duo published this detailed YouTube video, which documents how they discovered a chain of weaknesses that allows an attacker to remotely update a vulnerable device’s firmware with a malicious backdoor - using a low-privileged user account that has a blank password.
WESTERN DIGITAL MY PASSPORT 4TB MAKES BEEPING SOUND SOFTWARE
That update effectively nullified their chances at competing in Pwn2Own, which requires exploits to work against the latest firmware or software supported by the targeted device.
But just days before the event Western Digital released M圜loud OS 5, which eliminated the bug they found. Researchers Radek Domanski and Pedro Ribeiro originally planned to present their findings at the Pwn2Own hacking competition in Tokyo last year. But there is a similarly serious zero-day flaw present in a much broader range of newer Western Digital M圜loud network storage devices that will remain unfixed for many customers who can’t or won’t upgrade to the latest operating system.Īt issue is a remote code execution flaw residing in all Western Digital network attached storage (NAS) devices running M圜loud OS 3, an operating system the company only recently stopped supporting. Image: WD.Ĭountless Western Digital customers saw their MyBook Live network storage drives remotely wiped in the past month thanks to a bug in a product line the company stopped supporting in 2015, as well as a previously unknown zero-day flaw. Some of Western Digital’s M圜loud-based data storage devices.
0 kommentar(er)
