Home | VerSprite Resources

WD My Cloud

We are passionate about helping our clients chart a course that brings security and business together.

WD My Cloud Command Injection – Access All Private Folders

Video

Security Vulnerabilities

This video is a demonstration of the command injection vulnerability in the WD My Cloud NAS. It shows that it is possible to remotely access every folder and file on the NAS regardless of permissions.

Learn more

Command Injection in the WD My Cloud NAS

Blog Post

The WD My Cloud is predominantly displayed at major stores such as Costco, Walmart, Fry’s Electronics, etc. so perhaps most of our readers have seen this or know someone that owns one.

Learn more

WD My Cloud Command Injection – Remote Root with WebRTC

Video

Security Vulnerabilities

The WD My Cloud with firmware versions 04.01.03-421 and 04.01.04-422 suffer from command injection and cross-site request forgery (“CSRF”) vulnerabilities.

Learn more

We are an international squad of professionals working as one.

Email

[email protected]

logos