WD My Cloud EX2 Ultra (My Cloud EX2 Ultra)

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Very common	🔗 Proof	My Cloud EX2 Ultra (2016): enclosure and debug ports assessed under default deployment
Known vulnerabilities	Rare	🔗 Proof	My Cloud EX2 Ultra: no model-specific CVE found, scored as rare
Prior attacks	Rare	🔗 Proof	My Cloud EX2 Ultra: no public record of large-scale exploitation
Updatability	None	🔗 Proof	My Cloud EX2 Ultra (2016): firmware support assessed from vendor advisories
Category Score	Score: 3 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	My Cloud EX2 Ultra: primarily local accounts, directory integration not enabled by default
Communications	No encryption	🔗 Proof	My Cloud EX2 Ultra: management interface is HTTP/Telnet based
Storage	Encrypted with obselete encryption	🔗 Proof	My Cloud EX2 Ultra: volume and configuration encryption available but off by default
Category Score	Score: 3 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Basic	🔗 Proof	My Cloud EX2 Ultra: multiple accounts with roles, single admin by default
Authentication	Basic	🔗 Proof	My Cloud EX2 Ultra: local password plus optional two-factor
Brute-force protection	Basic	🔗 Proof	My Cloud EX2 Ultra: failed-login lockout present, limited strength
Event logging	Partial logging	🔗 Proof	My Cloud EX2 Ultra: login and access events logged, exportable
Passwords	Require change after setup	🔗 Proof	My Cloud EX2 Ultra: password change required at setup, no complexity rules
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	WD firmware (Companion App: My Cloud)
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity: Gigabit Ethernet, USB
Physical (Dimensions & Mass)	Dimensions: • Mass:

WD My Cloud EX2 Ultra is a nas in the NAS category. Evidence: NVD search / vendor manual. Assessment reflects default deployment; verify the installed firmware and manual before submission.