MyBook Users Urged to Unplug Devices from Internet
Summary: Western Digital is urging owners of its MyBook Live network storage drives to disconnect them from the Internet after attackers used a remote command execution flaw to factory-reset devices and wipe their data. The bug, tracked as CVE-2018-18472 and reported to Western Digital in June 2018, can be triggered by anyone who knows the device's IP address, and the affected MyBook Live and MyBook Live Duo products received their final firmware update in 2015.
Bottom line: The flaw was reported in 2018 with public proof-of-concept code, yet drives were still being wiped in June 2021 - three years in which the only mitigation was a vendor advisory telling customers to keep the devices off the Internet. Any storage device on your network that stopped receiving firmware in 2015 is running on that same assumption that someone read the notice.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2018-18472
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026