CVE-2021-36226

Description

Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://krebsonsecurity.com/2021/07/another-0-day-looms-for-many-western-digital-users/ ↗
• https://www.youtube.com/watch?v=vsg9YgvGBec ↗
• https://github.com/pedrib/PoC/blob/master/advisories/Pwn2Own/Tokyo_2020/weekend_destroyer/weekend_destroyer.md ↗