WD Patches NAS Security Flaw Which Could Have Allowed Full Takeover

WD patches NAS security flaw which could have allowed full takeover

Multiple versions are affected, and there don't appear to be any workarounds.

Critical WD My Cloud bug allows remote command injection

Western Digital has released firmware updates for multiple My Cloud NAS models to patch a critical-severity vulnerability that could be exploited remotely to execute arbitrary system commands.

Western Digital Patches Critical RCE Flaw in My Cloud NAS Devices

In the fast-evolving world of data storage, Western Digital has once again found itself at the center of a cybersecurity storm. The company recently disclosed and patched a critical vulnerability in its popular My Cloud network-attached storage (NAS) devices, a flaw that could have handed attackers complete control over affected systems. Tracked as CVE-2025-30247, this OS command injection bug scored a severity rating of 9.3 out of 10, underscor…

WD patches NAS security flaw which could have allowed full takeover - WorldNL Magazine

Image Credit: Shutterstock (Image credit: Everything Possible / Shutterstock) Western Digital patches critical RCE flaw CVE-2025-30247 in multiple My Cloud NAS modelsVulnerability exploited via crafted HTTP POST requests targeting the My Cloud user interfaceEnd-of-life models won’t receive updates; users urged to patch or migrate to newer devicesData storage giant Western Digital just fixed a critical-severity vulnerability that was discovered …

Western Digital My Cloud NAS devices vulnerable to unauthenticated RCE (CVE-2025-30247) - Help Net Security

Western Digital has fixed a critical remote code execution vulnerability (CVE-2025-30247) in the firmware powering its My Cloud network-attached storage (NAS) devices, and has urged users to upgrade as soon as possible. About CVE-2025-30247 Western Digital’s My Cloud devices are designed for home and small business users, to store documents and other content and access it via mobile apps or web browser. In small office settings, it’s also often …