Home | VerSprite Resources
View VerSprite's Compliance Advisory Services →
Download Service Listings
Exploitation of Vulnerabilities
This video is a demonstration of the command injection vulnerability in the WD My Cloud NAS. It shows that it is possible to remotely access every folder and file on the NAS regardless of permissions.
Learn more
Versprite
WD My Cloud
The WD My Cloud is predominantly displayed at major stores such as Costco, Walmart, Fry’s Electronics, etc. so perhaps most of our readers have seen this or know someone that owns one.
Security Vulnerabilities
The WD My Cloud with firmware versions 04.01.03-421 and 04.01.04-422 suffer from command injection and cross-site request forgery (“CSRF”) vulnerabilities.
Back to Resources
We are an international squad of professionals working as one.
Email
Phone