Anyone who owns a network storage system (NAS) from Western Digital should check whether the device is still in support. For some models, there will be no more security updates from the beginning of 2022 and the systems are potentially vulnerable.
Operating system out of date
The manufacturer announced the end of support for devices with the My Cloud OS 3 operating system in a post. This shows that in the near future only NAS systems with My Cloud OS 5 will receive security updates. Support for these devices is expected to run until 2026.
Network storage owners can use a listing to check whether their devices support My Cloud OS 5. This is no longer the case with My Cloud Home and the first My Cloud series, for example, and the devices no longer receive security updates.
Act now!
Western Digital recommends that all owners of supported NAS systems install My Cloud OS 5 by January 15, 2022 at the latest. Otherwise the devices will no longer receive updates and remote access via the Internet will be deactivated.
If you have a device that is no longer supported, you should disconnect it from the Internet for security reasons. Otherwise, attackers could exploit security holes and, in the worst case, gain full control over devices. Local use of NAS systems that are no longer supported should still be possible.
Support ends on April 15, 2022. The manufacturer has compiled further information on the end of support in an English FAQ. The attacks on the network HDDs with Ethernet connection My Book Live, whose support expired in 2015, showed that outdated and vulnerable firmware versions are a hit for attackers. After successful attacks, attackers deleted data.
(of)