Write down the IP Address shown.ĭ) Enter the IP address in the URL field of your browser. On a Windows PC left click the WD access icon in the bottom right systray, then click Properties. Click here for detailed instructions, or download and install the M圜loud Access app, then open Properties. For example:Ĭ) To launch using the IP address, you need to know the IP Address of your M圜loud drive. To install the M圜loud Dashboard:Ī) Using a computer that is connected to the same network as the My Cloud device, launch a web browserī) Enter either the name (or IP Address) of the My Cloud device into the URL field of the web browser. Before you can do this, if you have not already done so, you must install M圜loud Dashboard. Next you will install the FileFlex connector that you just downloaded on your WD M圜loud NAS. Download the FileFlex Connector for a WD M圜loud NAS from the Support section of the FileFlex website here. see the Installation Guide for your M圜loud model available at M圜loud Support.ġ. Note: You must be already set up as a user on the M圜loud NAS with credentials in place. Step 1: Install the FileFlex Connector on the WD M圜loud NAS. If you have permission, use the following steps to connect to your M圜loud. Regular readers will note that this isn’t the first time that WD My Cloud devices have been found to contain concerning vulnerabilities.įound this article interesting? Follow Graham Cluley on Twitter to read more of the exclusive content we post.Note: You will need authorization from your IT department in order to be able to connect to a WD M圜loud NAS. Customers are advised to install firmware version 2.30.174 to remove the bonkers backdoor. So, now we all know about it.Īnd that seems to have – finally – stirred Western Digital into action. Unfortunately, after six months, Western Digital still hadn’t issued any fixes.

Like any good vulnerability researcher, Bercegay informed the vendor about the problem, and Western Digital requested that he wait 90 days before publicly disclosing the flaw, giving them time to fix it. The following Western Digital devices are said to be vulnerable: In fact, the existence of default login credentials could even be used in a Mirai-style attack.

What isn’t quite so marvellous is that, sadly, someone might use the same credentials (and yes, they are apparently the same on all affected WD devices) to log into your personal files remotely.

Access my cloud account