Weakness of WD My Passport PRO 4TB (WDBSMT0040BBK-EESN)
What everyone keeps in secret from you when reviewing this device
- Cons:
- You bought network device that needs security patches
- It has old firmware from year 2017
- Old UNSECURE Linux kernel - Linux 3.10.24-rtk-nas #58 SMP PREEMPT Fri Dec 15 22:00:09 CST 2017 armv7l GNU/Linux https://www.cvedetails.com/vulnerability-list/vendor_id-33/product_id-47/version_id-159920/Linux-Linux-Kernel-3.10.24.html
- Old UNSECURE Server: Apache/2.4.9 (Unix) Server built: Dec 26 2017 19:47:50 https://www.cvedetails.com/vulnerability-list/vendor_id-45/product_id-66/version_id-169048/Apache-Http-Server-2.4.9.html
- With Old UNSECURE PHP 5.4.19 (cli) (built: Dec 26 2017 20:22:05) https://www.cvedetails.com/vulnerability-list/vendor_id-74/product_id-128/version_id-157065/PHP-PHP-5.4.19.html
- Supports only UNSECURE Windows Samba Share v1.0 - it is disabled in Windows 10 because of WannaCry Ransomware (Samba version 3.6.25) https://community.wd.com/t/my-passport-wireless-pro-does-not-show-up-as-a-network-share-storage-in-windows-10-heres-the-solution/214000
You should update smb.conf and change min SMB version to v2.0 - https://www.cyberciti.biz/faq/how-to-configure-samba-to-use-smbv2-and-disable-smbv1-on-linux-or-unix/ - Only SSH password login configurable via GUI. You should disable password login and replace it with SSH Key login.