Critical severity9.8NVD Advisory· Published Sep 18, 2019· Updated Jun 17, 2026

CVE-2019-16399

Description

Western Digital WD My Book World through II 1.02.12 suffers from Broken Authentication, which allows an attacker to access the /admin/ directory without credentials. An attacker can easily enable SSH from /admin/system_advanced.php?lang=en and login with the default root password welc0me.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Westerndigital/Wd My Book Firmware
cpe:2.3:o:westerndigital:wd_my_book_firmware:*:*:world_ii:*:*:*:*:*
Range: <=1.02.12
Western Digital WD/My Book Worlddescription
Westerndigital/WD My Book Worldllm-fuzzy
Range: <=1.02.12

Patches

Vulnerability mechanics

References

gist.github.com/pak0s/22ad6bae26198ebcd137b61adb6fcfe6nvdExploitThird Party Advisory
packetstormsecurity.com/files/154524/Western-Digital-My-Book-World-II-NAS-1.02.12-Hardcoded-Credential.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.006
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000