My Cloud Firmware Version 5.17.107
WDC Tracking Number: WDC-21011
Published: September 24, 2021
Last Updated: September 24, 2021
Description
My Cloud OS 5 Firmware 5.17.107 includes an update to help improve the security of your My Cloud devices. OpenSSL was vulnerable to a remote code execution and a denial-of-service vulnerability. These vulnerabilities when successfully exploited could lead to disclosure of sensitive information or denial-of-service.
Product Impact
      
      Last Updated
   My Cloud PR2100
      
      September 10, 2021
   My Cloud PR4100
      
      September 10, 2021
   My Cloud EX4100
      
      September 10, 2021
   My Cloud EX2 Ultra
      
      September 10, 2021
   My Cloud Mirror Gen 2
      
      September 10, 2021
   My Cloud DL2100
      
      September 10, 2021
   My Cloud DL4100
      
      September 10, 2021
   My Cloud EX2100
      
      September 10, 2021
   My Cloud
      
      September 10, 2021
   WD Cloud
      
      September 10, 2021
   For more information on the latest security updates, see the release notes: https://os5releasenotes.mycloud.com/#/
Advisory Summary
Addressed a remote code execution and denial-of-service vulnerability in My Cloud OS 5 by updating the OpenSSL version to 1.1.1d deb10u7.
CVE Number: CVE-2021-3711, CVE-2021-3712