CVE-2023-22812

Name of the Vulnerable Software and Affected Versions SanDisk PrivateAccess versions prior to 6.4.9

Description The issue concerns the support of insecure TLS 1.0 and TLS 1.1 protocols, making the system susceptible to man-in-the-middle attacks. This compromises the confidentiality and integrity of data.

Recommendations For SanDisk PrivateAccess versions prior to 6.4.9, update to version 6.4.9 or later to resolve the issue. As a temporary workaround, consider disabling the use of TLS 1.0 and TLS 1.1 protocols until a patch is available. Restrict access to sensitive data to minimize the risk of exploitation.