CVE-2019-13467 - Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 applications are potentially vulnerable to man-in-the-middle attacks when the applications download resources from the Dashboard web service

Back Back to CVE browser

MEDIUM

Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 applications are potentially vulnerable to man-in-the-middle attacks when the applications download resources from the Dashboard web service

Published Sep 30, 2019

5.9

MEDIUM

CVSS 3.1

EPSS 1.52%

Description

Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 applications are potentially vulnerable to man-in-the-middle attacks when the applications download resources from the Dashboard web service. This vulnerability may allow an attacker to substitute downloaded resources with arbitrary files.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://support.wdc.com/downloads.aspx?g=907&lang=en
x_refsource_MISCVendor Advisory
https://www.westerndigital.com/support/productsecurity/wdc-19009-sandisk-and-western-digital-ssd-dashboard-vulnerabilities
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://support.wdc.com/downloads.aspx?g=907&lang=en		x_refsource_MISCVendor Advisory
https://www.westerndigital.com/support/productsecurity/wdc-19009-sandisk-and-western-digital-ssd-dashboard-vulnerabilities		x_refsource_CONFIRMPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 30, 2019

Updated Aug 4, 2024

Reserved Jul 9, 2019

Link CVE-2019-13467

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-13467

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-13467