Western Digital NAS owners were warned of critical flaws in the company s My Cloud line of hardware that exposed data stored on those devices to attack. The flaws impact a dozen Western Digital drives that could allow remote adversaries to bypass logins, insert commands, upload files without permission, and gain control of devices. Western Digital has not provided any information regarding the vulnerabilities or supplied software updates to fix the reported bugs. In a statement to Threatpost, Western Digital said it was undertaking a preliminary evaluation of the vulnerability reports.
Source: https://threatpost.com/unpatched-western-digital-bugs-leave-nas-boxes-open-to-attack/124125/