Western Digital is forcing outdated My Cloud devices offline
Is your Western Digital My Cloud device currently offline? Don’t worry—the company isn’t suffering another service outage. Rather, it’s a new measure to prevent exploits of security vulnerabilities. If you haven’t updated your device’s firmware recently, it’s being barred from access to My Cloud.
As spotted by Bleeping Computer, Western Digital began blocking web access on June 15 if the NAS unit had not yet updated to firmware version 5.26.202 (My Cloud) or 9.4.1-101 (My Cloud Home, SanDisk ibi). The software updates were released on May 15, and include fixes for several security flaws. One is rated as critical severity. The policy change was announced in a security bulletin earlier this week.
While dramatic, Western Digital’s actions seem to be related to its service woes back in April, when a hack led the company to take down its servers for over a week to complete remediation. The critical severity issue patched in its May 15 firmware allows unauthenticated code to be executed remotely on a My Cloud device—which could expose users to threats like ransomware attacks.
Users can still access data on offline My Cloud devices locally. Access and management of files through the web becomes available again after the outdated device completes a firmware update. Affected devices include:
My Cloud PR2100 – requires 5.26.202 or laterMy Cloud PR4100 – requires 5.26.202 or laterMy Cloud EX4100 – requires 5.26.202 or laterMy Cloud EX2 Ultra – requires 5.26.202 or laterMy Cloud Mirror G2 – requires 5.26.202 or laterMy Cloud DL2100 – requires 5.26.202 or laterMy Cloud DL4100 – requires 5.26.202 or laterMy Cloud EX2100 – requires 5.26.202 or laterMy Cloud – requires 5.26.202 or laterWD Cloud – requires 5.26.202 or laterMy Cloud Home – requires 9.4.1-101 or laterMy Cloud Home Duo – requires 9.4.1-101 or laterSanDisk ibi – requires 9.4.1-101 or later
Western Digital’s security bulletins for My Cloud, My Cloud Home, and SanDisk ibi devices detail how to update your device’s firmware.
This policy announcement closely follows recent reports about Western Digital hard drive warnings, which, unlike the firmware updates mentioned above, do not address any security issues. Even without problems, some WD hard disk drives are flashing alerts after three years—and it’s causing the drives to stop working in Synology NAS devices. Synology is currently recommending that users turn off the warnings to restore functionality.
Author: Alaina Yee, Senior Editor
Alaina Yee is PCWorld’s resident bargain hunter—when she’s not covering software, PC building, and more, she’s scouring for the best tech deals. Previously her work has appeared in PC Gamer, IGN, Maximum PC, and Official Xbox Magazine. You can find her on Twitter at @morphingball.
Recent stories by Alaina Yee:
AVG Internet Security review: Reliable, budget-friendly antivirus softwareGot an older D-Link NAS? 92,000 of them are at high risk of getting hackedWorried your inactive Google Account might get deleted? Log in now