Home | VerSprite Resources

WD My Cloud

We are passionate about helping our clients chart a course that brings security and business together.

Access All Private Folders - WD My Cloud

Video

WD My Cloud Command Injection – Access All Private Folders

This video is a demonstration of the command injection vulnerability in the WD My Cloud NAS. It shows that it is possible to remotely access every folder and file on the NAS regardless of permissions.

Learn more

CMD Injection

Blog Post

Continuous Integration & Continuous Delivery (CI/CD)

Command Injection in the WD My Cloud NAS

The WD My Cloud is predominantly displayed at major stores such as Costco, Walmart, Fry’s Electronics, etc. so perhaps most of our readers have seen this or know someone that owns one.

Learn more

Western Digital My Cloud with firmware versions 04.01.03-421 and 04.01.04-422 suffer from a command injection vulnerability.

Video

Security Vulnerabilities

WD My Cloud Command Injection – Remote Root with WebRTC

The WD My Cloud with firmware versions 04.01.03-421 and 04.01.04-422 suffer from command injection and cross-site request forgery (“CSRF”) vulnerabilities.

Learn more

We are an international squad of professionals working as one.

Email

[email protected]

logos