CVE-2023-22812

SanDisk PrivateAccess Deprecated TLS protocol versions supported

CVSS 7.4 HIGHEPSS 0.3%CWE-327

SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Produtos afetados

SanDisk · PrivateAccess

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.westerndigital.com/support/product-security/wdc-23005-sandisk-privateaccess-software-update