The release fixes SMB server and critical vulnerabilities

Nov 29, 2017 09:44 GMT  ·  By

Western Digital has made available a new firmware package compatible with its My Cloud Mirror, My Cloud EX2, and My Cloud EX4 personal storages, namely version 2.11.168, which resolves a few critical security vulnerabilities.

Specifically speaking, this current update fixes the SMB server (samba) security breach (CVE-2017-7494) where clients can upload and cause the SMB server to execute commands, and makes sure unauthorized file deletion, command execution and authentication bypass are not permitted.

With this in mind, if you have been encountering these problems and want to get rid of them, then save and unzip the appropriate downloadable archive, go to Dashboard > Settings > Firmware > Update from File, and navigate and select the newly extracted .deb file.

Now, just agree with the Update Firmware pop-up window that will appear by clicking “Ok” and allow the network storage to perform the upgrade (it takes several minutes to complete). Make sure not to rename the .deb update file, as this will lead to various problems.

Moreover, bear in mind that, during the installation, you mustn’t turn off the My Cloud unit or computer, close the user interface, or interrupt the process in any way. Doing so will cause the device to malfunction or will render it unable to boot.

That said, download the appropriate package for your device from the links below, take into account all of the aforementioned aspects, and improve your NAS’ overall performance and stability.

Download WD My Cloud Mirror Personal Storage Firmware 2.11.168 Download WD My Cloud EX2 Personal Storage Firmware 2.11.168 Download WD My Cloud EX4 Personal Storage Firmware 2.11.168