Western Digital Users Face Another RCE.

06-July-21

The latest zero-day entails an attack chain that allows an unauthenticated intruder to execute code as root and install a permanent backdoor on the vendor’s network-attached storage (NAS) devices.

Latest bug, reported last week is a third, similarly serious zero-day vulnerability in a much broader range of newer Western Digital My Cloud NAS boxes.

Read More…