PT-2019-13351

CVE-2019-13466

·

Published

2019-09-30

·

Updated

2020-08-24

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Western Digital SSD Dashboard versions prior to 2.5.1.0 SanDisk SSD Dashboard versions prior to 2.5.1.0
Description The issue is related to Incorrect Access Control. Specifically, the generate reports archive is protected with a hard-coded password, which poses a security risk. An update is available that addresses the protection of archive encryption.
Recommendations For Western Digital SSD Dashboard versions prior to 2.5.1.0, update to version 2.5.1.0 or later to address the issue. For SanDisk SSD Dashboard versions prior to 2.5.1.0, update to version 2.5.1.0 or later to address the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾