WDC Tracking Number: WDC-19003
Published: March 12, 2019
Last Updated: May 14, 2020
My Cloud Firmware 04.05.00-334 includes multiple updates to help improve the security of your My Cloud device.
Updated Samba to version 4.3.11-16 to resolve a remote code execution vulnerability that could allow malicious clients to upload a shared library to a writeable directory and have the server load and execute it.
The version of portable SDK for UPnP (Universal Plug and Play) was vulnerable to a number of remote code execution vulnerabilities. Resolved the issue by updating the libupnp component to version 1.6.25.
Addressed additional Cross Site Request Forgery (CSRF) issues throughout My Cloud Dashboard Web user interface.
Apache has been updated to version 2.4.34 to address multiple vulnerabilities.