Lucene search
HistoryMar 24, 2023 - 8:15 p.m.
CVE-2023-22812
sandisk privateaccess
insecure tls
man-in-the-middle
confidentiality
integrity
data compromise
7.4 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
0.001 Low
EPSS
Percentile
48.5%
SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data.
Affected configurations
Node
westerndigitalsandisk_privateaccessRange<6.4.9
Related
prion
prion
Code injection
2023-03-24 20:15:00
cve
cve
CVE-2023-22812
2023-03-24 20:15:15
cvelist
cvelist
7.4 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
0.001 Low
EPSS
Percentile
48.5%
Related for NVD:CVE-2023-22812