Westerndigital Sandisk Privateaccess vulnerabilities

2 CVEs affecting Westerndigital Sandisk Privateaccess, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-22167, published 2024-03-13.

More from Westerndigital.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-22812, published 2023-03-24. High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days. SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of…
• CVE-2024-22167, published 2024-03-13. High severity, CVSS 7.9. EPSS: 0.2% chance of exploitation in the next 30 days. A potential DLL hijacking vulnerability in the SanDisk PrivateAccess application for Windows that could lead to arbitrary code execution in the context of the system user. This vulnerability is only…