Hardcoded backdoor in 12 Western Digital My Cloud NAS devices

Western Digital My Cloud network storage devices are vulnerable with a hardcoded backdoor. The hardcoded admin account username mydlinkBRionyg includes dlink Western Digitals My Cloud devices. Western Digital requested the standard 90 days before full disclosure of the flaws. The fix for the critical vulnerabilities is to upgrade the firmware to version 2.30.174.174, Gulftech security researcher James Bercegay said. Another vulnerability that was easy to exploit would allow an attacker to upload files to the device and give them control.”]

Source: https://www.csoonline.com/article/3246234/hardcoded-backdoor-in-12-western-digital-my-cloud-nas-devices.html