Blog | G5 Cyber Security

Hackers exploited 0-day, not 2018 bug, to mass-wipe My Book Live devices [Updated]

Western Digital will provide data recovery services starting early next month. The company also provided new technical details about the zeroday, which is now being tracked as CVE-2021-35941. My Book Live customers will also be eligible for a trade-in program so they can upgrade to My Cloud devices. The vulnerability is remarkable because it made it trivial to wipe what is likely petabytes of user data. To exploit the vulnerability, the attacker would have had to know the format of the XML request that triggers the reset, a security expert said.”]

Source: https://arstechnica.com/gadgets/2021/06/hackers-exploited-0-day-not-2018-bug-to-mass-wipe-my-book-live-devices/

Exit mobile version