Western Digital · Wd My Book World · CVE-2019-16399
**Name of the Vulnerable Software and Affected Versions**
Western Digital WD My Book World through II version 1.02.12
**Description**
The issue allows an attacker to access the "/admin/" directory without credentials. An attacker can enable SSH from "/admin/system advanced.php?lang=en" and login with the default root password `welc0me`.
**Recommendations**
For Western Digital WD My Book World through II version 1.02.12, as a temporary workaround, consider disabling access to the "/admin/" directory and changing the default root password `welc0me` to prevent unauthorized access. Restrict access to the `/admin/system advanced.php` endpoint to minimize the risk of exploitation.