Man-in-the-middle Vulnerability in Western Digital and SanDisk SSD Dashboard Applications
CVE-2019-13467

5.9MEDIUM

Key Information:

Vendor

Sandisk

Status
Ssd Dashboard
Vendor
CVE Published:
30 September 2019

What is CVE-2019-13467?

Western Digital and SanDisk SSD Dashboard applications prior to version 2.5.1.0 face potential risks of man-in-the-middle attacks. When these applications download resources from the Dashboard web service, attackers may exploit this vulnerability to replace legitimate resources with malicious files, thereby jeopardizing user data integrity and security.

References

https://support.wdc.com/downloads.aspx?g=907&lang=en
x_refsource_MISC
https://www.westerndigital.com/support/productsecurity/wd...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.