CVE-2019-16399

2019-09-1813:06:13

mitre

www.cve.org

9.6 High

AI Score

Confidence

High

0.164 Low

EPSS

Percentile

96.0%

JSON

Western Digital WD My Book World through II 1.02.12 suffers from Broken Authentication, which allows an attacker to access the /admin/ directory without credentials. An attacker can easily enable SSH from /admin/system_advanced.php?lang=en and login with the default root password welc0me.