PT-2019-13352
CVE-2019-13467
·
Publicado
2019-09-30
·
Atualizado
2020-08-24
Descrição por
CVSS 3.1
5.9
MédiaMétricasAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Western Digital SSD Dashboard versions prior to 2.5.1.0
SanDisk SSD Dashboard versions prior to 2.5.1.0
Description
The issue allows for man-in-the-middle attacks when the applications download resources from the Dashboard web service, potentially enabling an attacker to substitute downloaded resources with arbitrary files.
Recommendations
For Western Digital SSD Dashboard versions prior to 2.5.1.0, update to version 2.5.1.0 or later.
For SanDisk SSD Dashboard versions prior to 2.5.1.0, update to version 2.5.1.0 or later.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾