Western Digital’s not having a great time lately, huh? After having received reports from users that their Western Digital My Book Live devices were randomly wiping and deleting themselves – which turned out to be a remote exploit – now they’re facing an even bigger issue. Several of WD’s other NAS devices running OS 3 also have a pretty huge remote exploit vulnerability that Western Digital seemingly won’t fix.

The issue stems from the fact that the vulnerability exploits a weakness in My Cloud OS 3. WD actually patched this vulnerability and released OS 5 (there is no OS 4, apparently). The problem is, not all devices are capable of being upgraded from OS 3 to OS 5, so they’re still vulnerable and only Western Digital can resolve the problem.

[Read More…]

The Western Digital My Book Live NAS products are extremely popular amongst photographers. External storage devices that you can just whack on your network and access from any machine on your network. I’ve owned a few myself over the years and they were pretty good. It seems, though, that there’s a big issue with them at the moment. They’re deleting files without the owner’s knowledge.

According to a post on the Western Digital Community forums, many users have reported seeing their files missing with some being completely locked out of their devices. According to a statement from WD, it’s caused by an exploit that allows remote command execution. WD’s advice, for now, is to completely unplug them from the Internet.

[Read More…]