PT-2019-13352
CVE-2019-13467
·
Published
2019-09-30
·
Updated
2020-08-24
Description by
CVSS 3.1
5.9
MediumMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Western Digital SSD Dashboard versions prior to 2.5.1.0
SanDisk SSD Dashboard versions prior to 2.5.1.0
Description
The issue allows for man-in-the-middle attacks when the applications download resources from the Dashboard web service, potentially enabling an attacker to substitute downloaded resources with arbitrary files.
Recommendations
For Western Digital SSD Dashboard versions prior to 2.5.1.0, update to version 2.5.1.0 or later.
For SanDisk SSD Dashboard versions prior to 2.5.1.0, update to version 2.5.1.0 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾