NetGear Armor and Western Digital NAS vulnerabilities on RAX 50

Question

My NetGear Armor is continuously detecting vulnerabilities on my Western Digital Mycloud drive even though it is not connected to the Internet (software is out of life). It doesn't seem to detect any problems on anything else I've got connected to my home network. Would anyone have any ideas on how to solve this? This might become a moot point next month when the Netgear Armor subscription runs out and I might not renew it.&nbsp;

jmhga44 · Answer

Thanks for the response. At least I'm not the only one with this situation.

Retired_Member · Answer

Same problem here with my WD MyCloud 6TB. Has detected vulnerabilities since day one of having Armor. I also have the latest MyCloud firmware: 5.21.10, and cloud access is disabled on MyCloud.

Not sure if they are false positives or are unaddressed vulnerabilities by WD.

Topology · Answer

Perhaps NETGEAR Armor is detecting the existence of a default username/password for the WD My Cloud device, even if cloud access is disabled?

Retired_Member · Answer

It finds &gt;139 vulnerabilities and I'm not using default authentication

Jeffgear · Answer

A quick search on the ISC2 vulnerability database shows a few critical vulnerabilities for&nbsp;Western Digital Mycloud. Armor may be detecting indicators related to these vulnerabilities if present on your service. It might be worth following upon the CVEs for the vendor's mitigation guidance.&nbsp;

Forum Discussion

NetGear Armor and Western Digital NAS vulnerabilities on RAX 50

9 Replies