Improper access control

Improper access control in the installer for IntelR SSD DCT versions before 3.0.23 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8759

Improper access control in the installer for IntelR SSD DCT versions before 3.0.23 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8759

CVE-2020-8759 : The Intel® SSD Data Center Tool (DCT) installer contains an improper access control vulnerability that could allow a privileged local user to escalate privileges. The issue affects Intel® SSD DCT before version 3.0.23. Intel’s advisory recommends updating to version 3.0.23 or late...

Intel® SSD DCT Advisory

Summary: A potential security vulnerability in the Intel® SSD Data Center Tool DCT may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8759 Description: Improper access control in the installer for...

CVE-2020-0527

Insufficient control flow management in firmware for some IntelR Data Center SSDs may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-0527

Insufficient control flow management in firmware for some IntelR Data Center SSDs may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-0527

CVE-2020-0527 concerns firmware in Intel® Data Center SSDs with insufficient control flow management, enabling potential information disclosure by a privileged user with local access. Connected Intel advisory INTEL-SA-00266 lists affected products: Intel® SSD D3-S4510 Series; Intel® SSD DC P4510 ...

Critical Intel Flaws Fixed in Active Management Technology

Intel has released its June security updates, which address two critical vulnerabilities that, if exploited, can give unauthenticated attackers elevated privileges. The critical flaws exist in Intel’s Active Management Technology AMT, which is used for remote out-of-band management of personal...

2020.1 IPU – Intel® SSD Advisory

Summary: A potential security vulnerability in Intel® Solid State Drive SSD products may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVE ID: CVE-2020-0527 Description: Insufficient control flow management in...

Intel SSD Advisory - Lenovo Support US

No description provided...

Intel SSD Advisory - Lenovo Support US

Lenovo Security Advisory: LEN-30040 Potential Impact: Information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0527 Summary Description: Intel reported a potential security vulnerability in Intel Solid State Drive SSD products that may allow information...

Synology DiskStation Manager - smart.cgi Remote Command Execution Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule \d+&minor=?\d+&build=?\d+ &junior=\d+&unique=synology\w+?^&+/x.freeze def initializeinfo = super updateinfo info, 'Name' = 'Synology DiskStation...

CVE-2020-8959

Western Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hijacking...

CVE-2020-8959

CVE-2020-8959 affects Western Digital WesternDigitalSSDDashboardSetup.exe prior to version 3.0.2.0 and is described as allowing DLL hijacking. The vulnerability arises from the installer’s handling of DLL loading, with impacts stated as high for confidentiality, integrity, and availability, and a...

CVE-2019-13467

Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 applications are potentially vulnerable to man-in-the-middle attacks when the applications download resources from the Dashboard web service. This vulnerability may allow an attacker to substitute...

Design/Logic Flaw

Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 applications are potentially vulnerable to man-in-the-middle attacks when the applications download resources from the Dashboard web service. This vulnerability may allow an attacker to substitute...

CVE-2019-13467

Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 applications are potentially vulnerable to man-in-the-middle attacks when the applications download resources from the Dashboard web service. This vulnerability may allow an attacker to substitute...

CVE-2019-13467

CVE-2019-13467 affects Western Digital SSD Dashboard and SanDisk SSD Dashboard prior to 2.5.1.0. The issue enables potential man-in-the-middle attacks when the dashboard web service resources are downloaded, allowing an attacker to substitute downloaded resources with arbitrary files. The connect...

CVE-2019-13466

Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control. The “generate reports” archive is protected with a hard-coded password. An application update that addresses the protection of archive encryption is available...

Hardcoded credentials

Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control. The “generate reports” archive is protected with a hard-coded password. An application update that addresses the protection of archive encryption is available...