Browsing tag

Western Digital

Western Digital Confirms Customer Data Stolen by Hackers in March Breach

Digital storage giant Western Digital confirmed that an “unauthorized third party” gained access to its systems and stole personal information belonging to the company’s online store customers. “This information included customer names, billing and shipping addresses, email addresses and telephone numbers,” the San Jose-based company said in a disclosure last week. “In addition, the database […]

Western Digital Hit by Network Security Breach – Critical Services Disrupted!

Data storage devices maker Western Digital on Monday disclosed a “network security incident” that involved unauthorized access to its systems. The breach is said to have occurred on March 26, 2023, enabling an unnamed third party to gain access to a “number of the company’s systems.” Following the discovery of the hack, Western Digital said […]

Vulnerability in My cloud devices exposes sensitive information

Western Digital My Cloud authentication bypass vulnerability would allow hackers to access stored content Researchers from an ethical hacking firm discovered a privilege escalation vulnerability on the Western Digital My Cloud platform, which hackers could leverage to gain admin-level access to the device through a HTTP request. The flaw, identified as CVE-2018-17153, would allow an unauthenticated attacker with […]

My Cloud EX2 device from Western Digital leaks files by default

According to research conducted by information security professionals at Trustwave, Western Digital’s My Cloud EX2 storage devices filter files to anyone in a local network by default, this is regardless of the permissions set by users. If configured for remote access through the public Internet, My Cloud EX2 will also be able to filter files […]

Hardcoded Backdoor Found In WD My Cloud NAS With Username “MyDlink”

In yet another revelation of severe loopholes, a security researcher James Bercegay from Gulftech has discovered a backdoor in some models of the My Cloud NAS (Network-attached storage) drive family, manufactured by Western Digital. According to the blog post, the vulnerabilities, which include a hardcoded backdoor, can be used to access files even on a […]

Hacking the Western Digital MyCloud NAS

Sometimes at Exploitee.rs, we look for fun devices to hack and sometimes the devices find us. Today we’re going to talk about a recent time where we found ourselves in the latter situation and our experience with the Western Digital series of Networked Attached Storage devices. In the middle of last year I (Zenofex) began […]