The latest zero-day entails an attack chain that allows an unauthenticated intruder to execute code as root and install a permanent backdoor on the vendor’s network-attached storage (NAS) devices.
Latest bug, reported last week is a third, similarly serious zero-day vulnerability in a much broader range of newer Western Digital My Cloud NAS boxes.