SanDisk PrivateAccess Deprecated TLS protocol versions supported
CVE-2023-22812

7.4HIGH

Key Information:

Vendor

Sandisk

Status
Privateaccess
Vendor
CVE Published:
24 March 2023

What is CVE-2023-22812?

SanDisk PrivateAccess versions prior to 6.4.9 are vulnerable due to the use of outdated and insecure TLS 1.0 and TLS 1.1 protocols. These legacy protocols expose users to potential man-in-the-middle attacks, which can compromise both the confidentiality and integrity of sensitive data being transmitted. It is crucial for users to update to the latest version to mitigate these risks and enhance their data security.

Affected Version(s)

PrivateAccess 0 < 6.4.9

References

https://www.westerndigital.com/support/product-security/w...

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.