CVE-2019-16399

PoC —

CVSS 3.1

9.8 critical

EPSS

7%p94

Published

Sep 18, 2019 (Sep 18, 2019)

Modified

Jun 17, 2026

Description

Western Digital WD My Book World through II 1.02.12 suffers from Broken Authentication, which allows an attacker to access the /admin/ directory without credentials. An attacker can easily enable SSH from /admin/system_advanced.php?lang=en and login with the default root password welc0me.

Vendors: westerndigital
Products: wd my book firmware
Weakness: CWE-798
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (7.1%)

In the news0 stories

No ingested article mentions this CVE yet.