Ok So this is simple no big writeup, I am not sober enough. But this will do the trick. Admin can be obtained by typing in your mycloudex2 IP followed by /web After about a minute it will kick you out. But thats plenty of time to enable ssh and set a passwd. Also while I am in the blogging mood. After audit of this /web/ I have discovered that WD is using Google Analitics <–typo—/ So basically if im remembering correctly this will allow whoever owns the Google Account to Pull usage details. And many many other things…. Not cool WD.
Till Next time, Stay safe. And use my rootkit. Cheers.