CVE-2019-16399

Western Digital WD My Book World through II 1.02.12 suffers from Broken Authentication, which allows an attacker to access the /admin/ directory without credentials. An attacker can easily enable SSH from /admin/system_advanced.php?lang=en and login with the default root password welc0me.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

7.08% chance of exploitation in the next 30 days, 94th percentile

Published

2019-09-18

Updated

2024-08-05

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/47399

References

• CVE Record
• NVD entry

Related

• CVE-2019-16394
• CVE-2019-16404
• CVE-2019-16385
• CVE-2019-16405
• CVE-2019-16384
• CVE-2019-16414