Hackers Are Erasing Western Digital Hard Drives Remotely

Amazon acquires Wickr, the Senate holds up CISA, and more of the week’s top security news...

MyBook Users Urged to Unplug Devices from Internet

Hard drive giant Western Digital is urging users of its MyBook Live brand of network storage drives to disconnect them from the Internet, warning that malicious hackers are remotely wiping the drives using a critical flaw that can be triggered by anyone who knows the Internet address of an affect...

My Book Live Users Wake Up to Wiped Devices

If you haven’t already, stop reading and go yank your My Book Live storage device offline, lest you join the ranks of those who woke up on Thursday to find that years of data had been wiped clean on devices around the world. Western Digital’s My Book storage device is designed for consumers and...

Unspecified Vulnerability in Western Digital EdgeRover

Western Digital EdgeRover is a personal content application from Western Digital USA. A security vulnerability existed prior to version 0.25 of Western Digital EdgeRover, which stems from the way Node.js is used, where a low-privileged user could load malicious content into a directory with highe...

CVE-2021-33205

Western Digital EdgeRover before 0.25 has an escalation of privileges vulnerability where a low privileged user could load malicious content into directories with higher privileges, because of how Node.js is used. An attacker can gain admin privileges and carry out malicious activities such as...

Privilege escalation

Western Digital EdgeRover before 0.25 has an escalation of privileges vulnerability where a low privileged user could load malicious content into directories with higher privileges, because of how Node.js is used. An attacker can gain admin privileges and carry out malicious activities such as...

CVE-2021-33205

Western Digital EdgeRover before 0.25 has an escalation of privileges vulnerability where a low privileged user could load malicious content into directories with higher privileges, because of how Node.js is used. An attacker can gain admin privileges and carry out malicious activities such as...

CVE-2021-33205

CVE-2021-33205 affects Western Digital EdgeRover prior to version 0.25. The vulnerability allows a low-privileged user to escalate privileges by loading malicious content into directories with higher privileges due to how Node.js is used, enabling an attacker to gain admin privileges and perform ...

Western Digital EdgeRover 安全漏洞

Western Digital EdgeRover is a personal content application from Western Digital USA. A security vulnerability existed prior to version 0.25 of Western Digital EdgeRover, which stems from the way Node.js is used, where a low-privileged user could load malicious content into a directory with highe...

CVE-2021-28653

CVE-2021-28653 affects iOS and macOS apps prior to 1.4.1 for Western Digital G‑Technology ArmorLock NVMe SSD. The vulnerability arises from insecure key storage: the app stores keys using a non‑preferred mechanism when Secure Enclave is available but biometric hardware is absent. This can lead to...

西部数据 Western Digital G-Technology ArmorLock NVMe SSD 安全漏洞

The Western Digital G-Technology ArmorLock NVMe SSD is a firmware from Western Digital, Inc. It provides a computer storage device made with integrated circuits. A security vulnerability exists in Western Digital G-Technology ArmorLock NVMe SSDs, which stems from an insecure storage key. The...

Western Digital MyCloud PR4100 Link Resolution Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Western Digital MyCloud PR4100. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SMB and AFP services. By creating a symbolic link, an attacke...

Western Digital My Cloud OS 5 Backlink Vulnerability

Western Digital My Cloud is a personal cloud storage device from Western Digital, Inc. A backlink vulnerability exists in Western Digital My Cloud OS 5 that could be exploited by attackers to cause code execution and information disclosure...

CVE-2021-3310

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...

CVE-2021-3310

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...

CVE-2021-3310

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...

Information disclosure

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...

CVE-2021-3310

CVE-2021-3310 affects Western Digital My Cloud OS 5 devices prior to firmware 5.10.122. The flaw arises from mishandling Symbolic Link Following on SMB/AFP shares, enabling either local or remote attackers to achieve information disclosure and, per sources, potential code execution by abusing sym...

Western Digital My Cloud 后置链接漏洞

Western Digital My Cloud is a personal cloud storage device from Western Digital, Inc. A backlink vulnerability exists in Western Digital My Cloud OS 5 that could be exploited by attackers to cause code execution and information disclosure...

Western Digital My Cloud Multiple Products 5.0 < 5.10.122 Multiple Vulnerabilities (WDC-21002)

Multiple Western Digital My Cloud products are prone to a local code execution and information disclosure vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...