NetGear Armor and Western Digital NAS vulnerabilities on RAX 50

[jmhga44]

My NetGear Armor is continuously detecting vulnerabilities on my Western Digital Mycloud drive even though it is not connected to the Internet (software is out of life). It doesn't seem to detect any problems on anything else I've got connected to my home network. Would anyone have any ideas on how to solve this? This might become a moot point next month when the Netgear Armor subscription runs out and I might not renew it. 

[MetsFan69]

Same problem here with my WD MyCloud 6TB. Has detected vulnerabilities since day one of having Armor. I also have the latest MyCloud firmware: 5.21.10, and cloud access is disabled on MyCloud.

Not sure if they are false positives or are unaddressed vulnerabilities by WD.

[jmhga44]

Thanks for the response. At least I'm not the only one with this situation.

[Topology]

Perhaps NETGEAR Armor is detecting the existence of a default username/password for the WD My Cloud device, even if cloud access is disabled?

[MetsFan69]

It finds >139 vulnerabilities and I'm not using default authentication

[Jeffgear]

A quick search on the ISC2 vulnerability database shows a few critical vulnerabilities for Western Digital Mycloud. Armor may be detecting indicators related to these vulnerabilities if present on your service. It might be worth following upon the CVEs for the vendor's mitigation guidance. 

[jmhga44]

The vulnerabilities you show in your post seem to be for the WD MyCloud PR4100..that's not the model I have. How did you find those?

[jmhga44]

Jeffgear.. I also just found out about a firmware update for my drive to v4.06.00-111 and am applying it. I'll see what NetGear Armor shows after that gets applied.

[Jeffgear]

I search for WD mycloud in a vulnerability database service that the ISC InfoSec organisation provides to its subscribers. Although this is not for non members the CVE numbers can be googled for more details. As you correctly point out the ones I listed are for a different model but I suspect they may be present across their platform as is sometimes the case. I could not find anything specific to your model but if you research the CVE and vendor’s vulnerability notifications you may be able to confirm if your particular model is affected. If not, I suspect it’s an Armor false -+ve.

[Jeffgear]

Fingers crossed it fixes the alerts. If not then I suspect a false +ve.