CVE-2019-13466: High severity western digital ssd dashboard vulnerability
Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control. The “generate reports” archive is protected with a hard-coded password. An application update that addresses the protection of archive encryption is available.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-13466.
What is the severity level of CVE-2019-13466?
The severity level of CVE-2019-13466 is high with a score of 7.5 out of 10.
What software versions are affected by this vulnerability?
The Western Digital SSD Dashboard versions before 2.5.1.0 and SanDisk SSD Dashboard versions before 2.5.1.0 are affected by this vulnerability.
What is the issue with the affected software?
The issue with the affected software is incorrect access control, where the 'generate reports' archive is protected with a hard-coded password.
Is there a fix available for this vulnerability?
Yes, an application update is available to address the protection of archive encryption.