Western Digital has issued a warning to owners of My Cloud series devices, stating that they will lose the ability to connect to cloud services starting from June 15, 2023, if they do not upgrade their firmware to version 5.26.202.
The decision to take this measure comes as the latest firmware release addresses a critical remotely exploitable vulnerability that could result in unauthenticated code execution.
Owners of devices with firmware versions below 5.26.202 will be unable to access Western Digital cloud services and their data through platforms such as mycloud.com and the My Cloud OS 5 mobile app until they update their devices.
However, users will still be able to access their data locally. Western Digital emphasizes the importance of the upgrade due to the potential risks of unauthorized access and the deployment of ransomware.
The affected devices include various models from the My Cloud series, such as My Cloud PR2100, My Cloud EX2 Ultra, and My Cloud Home Duo. The firmware versions required for each device are specified by Western Digital. The latest firmware versions, released on May 15, 2023, also address four vulnerabilities, including a critical path traversal flaw and a server-side request forgery vulnerability.
To ensure the security of their data and prevent potential cyberattacks, owners of My Cloud devices are encouraged to follow Western Digital’s instructions and update their firmware to the designated versions as soon as possible.
