Western Digital does not address the risks posed by older My Cloud OS3 storage devices

Owners of Western Digital network storage devices (NAS) may soon have another security feature. Following the two errors that were used , Security spokesman Brian Krebs said on another zero-day threat involving Western Digital assets running the company’s My Cloud OS3 program. In addition, it does not appear that there will be an adjustment for those who cannot convert to a new form of storage.

Earlier this year, security investigators Radek Domanski and Pedro Ribeiro discovered a number of shortcomings that allow the bad player to switch remotely My Cloud tool to extend the back door. The pair reportedly heard no further from the company as they tried to contact them about the risk. Western Digital claims that its response (or lack thereof) is one of many.

“The interview we received confirmed that the investigative team was preparing to release the details of the threat and asked us to answer any questions,” a company spokesman told Krebs. “We had no questions about why we didn’t answer. Since then, we have changed everything we want to do and responded to all reports to avoid miscommunication like this. ”

Although the error is not found in Western Cloud’s new My Cloud OS 5, it is not known if the company came back to respond in My Cloud OS3. Plus, it doesn’t need to support the old program. “We do not provide any additional security updates to My Cloud OS3 firmware,” Western Digital says in a dated March 12, 2021. “We strongly encourage you to migrate to my My Cloud OS 5 firmware. If your device cannot be upgraded to My Cloud OS 5, we encourage you to switch to one of My Cloud OS 5 support providers.”

We have been contacting the company for more information. In the meantime, you can protect your My Cloud device by Domanski and Ribiro grew up. One thing to note is that you need to reuse it every time you restart your device. You can also protect your My Cloud NAS vehicle by blocking access to the Internet.