As of June 15, users who have not yet installed the latest firmware update for their NAS will no longer be able to access their data via My Cloud.

Western Digital released a firmware update for NAS devices on May 15th. The update includes a patch for four vulnerabilities: CVE-2022-36326, CVE-2022-36327, CVE-2022-36328, and CVE-2022-29840. Attackers could exploit the vulnerabilities to gain unauthorized access to the My Cloud account associated with the device and steal or encrypt data.

If you haven’t installed the update yet, you’d better do it faster. Western Digital has made the drastic decision not to allow devices that do not meet the firmware requirements to access My Cloud starting June 15th. Users can then no longer distribute their data and files via the cloud on the web. Local access will remain available, confirms Western Digital.

Do I need to upgrade my NAS?

The measure applies to the following devices, which must run version 5.26.202:

• My Cloud PR2100
• My Cloud PR4100
• My Cloud EX4100
• My Cloud EX2 Ultra
• My CloudMirror G2
• My Cloud DL2100
• My Cloud DL4100
• My Cloud EX2100
• my cloud
• WD Cloud

My Cloud Home and SanDisk Ibi devices must be updated to version 9.4.1-101. Firmware updates can be obtained from the Western Digital website or through the My Cloud platform. The manufacturer is not only imposing the measure out of concern for its customers. My Cloud itself was attacked by hackers in April. Western Digital had to admit that customer data had also been stolen.