Re:WDMyCloud Multiple Vulnerabilities
by guiambros on Saturday January 06, 2018 @07:31PM
(#16088331)
Synology has its own backdoor as well [1]. Luckily the backdoor is only active when the OS crashed and the device is in recovery mode.
They also have some very odd practices, like hard-coding specific users and the shell to be used inside OpenSSH binary [2]. This was 2012; haven't checked if the code improved since then.
They also have some very odd practices, like hard-coding specific users and the shell to be used inside OpenSSH binary [2]. This was 2012; haven't checked if the code improved since then.
[1] https://wrgms.com/synologys-secret-telnet-password/
[2] https://serverfault.com/questions/458553/cant-log-in-via-ssh...