Western Digital

VDP · Storage · Self-Hosted

Industry: Storage
Type: Vulnerability Disclosure Program
Platform: Self-Hosted
VDP: www.westerndigital.com/support/product-security/vulnerability-disclosure-policy ↗
Payouts: No bounty (VDP)
Scope: Western Digital devices — external and internal drives, network-attached storage (NAS), and their firmware and companion apps.

In-scope assets (1)


Storage Devices and NAS	VDP

Previous Research

Publications and Presentations

Presentations

Self-Encrypting Deception: Weaknesses in the Encryption of Solid State Drives — Carlo Meijer and Bernard van Gastel, IEEE Symposium on Security and Privacy, May 19, 2019

Publications

A Pain in the NAS: Exploiting Cloud Connectivity to PWN your NAS: WD PR4100 Edition — Noam Moshe, Claroty Team82, August 9, 2023
Hacking the Western Digital MyCloud NAS — zenofex, Exploitee.rs, March 4, 2017

<- back to Programs