CVE-2019-13466

Concretely affected: Western Digital SSD Dashboard and SanDisk SSD Dashboard prior to version 2.5.1.0. Vulnerability: Incorrect access control where the generate reports archive is protected with a hard-coded password. Root cause: insufficient access restrictions for archive generation. Impact: p...

CVE-2019-13467

CVE-2019-13467 affects Western Digital SSD Dashboard and SanDisk SSD Dashboard prior to 2.5.1.0. The issue enables potential man-in-the-middle attacks when the dashboard web service resources are downloaded, allowing an attacker to substitute downloaded resources with arbitrary files. The connect...