WD mycloud hard coded backdoor

on top of meltdown/spectre, intel ME , amd PSP and Intel HT goof comes yet more hardware issues:

Several serious security issues were uncovered during my research.
Vulnerabilities such as pre auth remote root code execution, as well as a
hardcoded backdoor admin account which can NOT be changed. The backdoor
also allows for pre auth remote root code execution on the affected device.

this one can be exploited remotely …

2 Likes

… and I was just about to put my EX4 for sale on here. Guess I’ll update it first.