Support Product Security

My Cloud Firmware Version 2.31.204

WDC Tracking Number: WDC-19016
Product Line/Web:  My Cloud
Published: December 16, 2019

Last Updated: December 16, 2019

Description

My Cloud Firmware 2.31.204 includes two updates to help improve the security of your My Cloud devices.

Product Impact
Last Updated
My Cloud
December 16, 2019
My Cloud EX2 Ultra
December 16, 2019
My Cloud Mirror Gen 2
December 16, 2019
My Cloud DL2100
December 16, 2019
My Cloud DL4100
December 16, 2019
My Cloud EX2100
December 16, 2019
My Cloud EX4100
December 16, 2019
My Cloud PR2100
December 16, 2019
My Cloud PR4100
December 16, 2019

Advisory Summary

A vulnerability was addressed in the FTP server which could allow an unauthenticated attacker to inject commands prior to TLS authentication.·

CVE Number: CVE-2011-1575

Resolved an issue where cloud access could not be disabled using the Cloud Service ON/OFF toggle switch and could allow private files to be visible online even though the cloud services were turned off.

  • Reported by: Seth Wiseman