According to Western Digital[1], the CVE involved[2] has been public and unpatched since 2019. That's insane.
There's "we don't support end-of-life devices" and then there's "we refuse to fix absolutely critical, crippling security vulnerabilities in devices just a few years old." This is well over the line.
I smell (but have no idea of the merits of) a class action lawsuit.
There's "we don't support end-of-life devices" and then there's "we refuse to fix absolutely critical, crippling security vulnerabilities in devices just a few years old." This is well over the line.
I smell (but have no idea of the merits of) a class action lawsuit.
[1] https://www.westerndigital.com/support/productsecurity/wdc-2...
[2] https://nvd.nist.gov/vuln/detail/CVE-2018-18472