Westerndigital Ssd Dashboard vulnerabilities

2 vulnerabilities

Known vulnerabilities in Westerndigital Ssd Dashboard, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.9CVE-2019-13467sandiskssd_dashboard+1
EPSS score
1.52%
Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 applications are potentially vulnerable to man-in-the-middle attacks when the applications download resources from the Dashboard web service. This vulnerability may allow an attacker to substitute downloaded resources with arbitrary files.7.5CVE-2019-13466sandiskssd_dashboard+1
EPSS score
0.66%
Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control. The “generate reports” archive is protected with a hard-coded password. An application update that addresses the protection of archive encryption is available.