Westerndigital Ssd Dashboard vulnerabilities

2 CVEs affecting Westerndigital Ssd Dashboard, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-13467, published 2019-09-30.

More from Westerndigital.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-13467, published 2019-09-30. Medium severity, CVSS 5.9. EPSS: 1.5% chance of exploitation in the next 30 days. Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 applications are potentially vulnerable to man-in-the-middle attacks when the applications download…
• CVE-2019-13466, published 2019-09-30. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control. The “generate reports” archive is protected with a hard-coded password. An…