cant configure plex media server on wdex2100

Yes, this is the very moment when ddi scripts are dangerous for every owner of the above models. Metasploit is publicly available - anyone can download it and use it to attack NAS devices. Models that are vulnerable: My Cloud Gen 2 A user from his device can visit a website where an attacker has hung a specially generated HTML image or IFrame through which he can try to make a request to devices on your local network using predictable host names and gain unauthorized access without even trying to attack you with active scanning. If you think that your home NAS is not openly accessible from the Internet, but is simply turned on in your home network, it can still be attacked through another user device (computer, tablet, phone). The situation should sensitively hit the reputation of the company - to overlook such shortcomings in the production of network NAS solutions, about the security of which WD writes a lot (including on Habré) - this is very unprofessional. James Bercegay discovered the vulnerability in mid-2017, but after 6 months that WD was given to fix the problem, no official patch has been released.ĭetails of the vulnerability and an example exploit were posted on GulfTech on January 5, 2018.Īn additional nuisance of the backdoor is that the login and password are hardcoded and cannot be changed just like that - anyone can use the admin login 'mydlinkBRionyg' and the password 'abc12345cba' to log into the My Cloud and gain access to the shell, which unties their hands for a lot of options unauthorized use. The backdoor allows you to get root access to devices simply by using a hard-wired login and password for many NAS solutions.

Or rather, a natural built-in backdoor, for which there is still no official patch at the moment. Vulnerability in NAS devices from Western Digital.

Cant configure plex media server on wdex2100