A decade-old vulnerability led to WD My Book Live devices getting wiped