Support Product Security

My Cloud Firmware Version 5.17.107

WDC Tracking Number: WDC-21011
Published: September 24, 2021

Last Updated:  September 24, 2021

Description

My Cloud OS 5 Firmware 5.17.107 includes an update to help improve the security of your My Cloud devices. OpenSSL was vulnerable to a remote code execution and a denial-of-service vulnerability. These vulnerabilities when successfully exploited could lead to disclosure of sensitive information or denial-of-service.

Product Impact
Last Updated
My Cloud PR2100
September 10, 2021
My Cloud PR4100
September 10, 2021
My Cloud EX4100
September 10, 2021
My Cloud EX2 Ultra
September 10, 2021
My Cloud Mirror Gen 2
September 10, 2021
My Cloud DL2100
September 10, 2021
My Cloud DL4100
September 10, 2021
My Cloud EX2100
September 10, 2021
My Cloud
September 10, 2021
WD Cloud
September 10, 2021

For more information on the latest security updates, see the release notes: https://os5releasenotes.mycloud.com/#/

Advisory Summary

Addressed a remote code execution and denial-of-service vulnerability in My Cloud OS 5 by updating the OpenSSL version to 1.1.1d deb10u7.

CVE Number: CVE-2021-3711, CVE-2021-3712