SA
Vendor
SanDisk
21
CVEs
0
On KEV
0
New 30D
Products
IB9.8
ibi
SanDisk
8 CVEs0 on KEV0 new
CE–
Cruzer Enterprise Usb
Sandisk
2 CVEs0 on KEV0 new
IW5.9
ibi web app
SanDisk
2 CVEs0 on KEV0 new
SE8.1
Secureaccess
Sandisk
2 CVEs0 on KEV0 new
SD7.5
Ssd Dashboard
Sandisk
2 CVEs0 on KEV0 new
CE–
Cruzer Enterprise Firmware
Sandisk
1 CVEs0 on KEV0 new
IM4.3
ibi Mobile App
SanDisk
1 CVEs0 on KEV0 new
PR7.4
PrivateAccess
SanDisk
1 CVEs0 on KEV0 new
PW7.9
PrivateAccess Windows App
SanDisk
1 CVEs0 on KEV0 new
SS7.8
SanDisk Security Installer for Windows
SanDisk
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-22168 | IW ibi web app SanDisk | 5.9 | Jun 24 | Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps |
| CVE-2024-22167 | PW PrivateAccess Windows App SanDisk | 7.9 | Mar 13 | SanDisk PrivateAccess DLL Hijacking Vulnerability |
| CVE-2023-22819 | IB ibi SanDisk | 4.9 | Feb 5 | Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products |
| CVE-2023-22817 | IB ibi SanDisk | 5.5 | Feb 5 | Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products |
| CVE-2023-22818 | SS SanDisk Security Installer for Windows SanDisk | 7.8 | Nov 15 | Multiple DLL Search Order hijacking Vulnerabilities in SanDisk Security Installer for Windows |
| CVE-2022-36331 | IB ibi SanDisk | 7.5 | Jun 12 | Impersonation attack causing an Authentication Bypass on Western Digital devices |
| CVE-2022-36328 | IB ibi SanDisk | 4.9 | May 18 | Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices |
| CVE-2022-36327 | IB ibi SanDisk | 9.8 | May 18 | Path traversal vulnerability leading to an arbitrary file write in Western Digital devices |
| CVE-2022-36326 | IB ibi SanDisk | 4.9 | May 18 | Resource Exhaustion Vulnerability in Western Digital devices |
| CVE-2022-36329 | IB ibi SanDisk | 7.5 | May 10 | Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices |
| CVE-2022-36330 | IB ibi SanDisk | 8.1 | May 9 | Buffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices |
| CVE-2023-22813 | IW ibi Web App SanDisk | 4.3 | May 8 | Device API endpoint missing access controls on Western Digital Mobile and Web Apps |
| CVE-2023-22812 | PR PrivateAccess SanDisk | 7.4 | Mar 24 | SanDisk PrivateAccess Deprecated TLS protocol versions supported |
| CVE-2021-36750 | SE Secureaccess Sandisk | 8.1 | Dec 22 | ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users (across USB drives sold under… |
| CVE-2019-13467 | SD Ssd Dashboard Sandisk | 5.9 | Sep 30 | Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 applications are potentially vulnerable to man-in-the-middle attacks when the… |
| CVE-2019-13466 | SD Ssd Dashboard Sandisk | 7.5 | Sep 30 | Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control |
| CVE-2017-16560 | SE Secureaccess Sandisk | 4.3 | Nov 16 | SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indefinitely in certain situations, such as if the file is being… |
| CVE-2010-0226 | CE Cruzer Enterprise Usb Sandisk | – | Jan 7 | SanDisk Cruzer Enterprise USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing… |
| CVE-2010-0225 | CE Cruzer Enterprise Firmware Sandisk | – | Jan 7 | SanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers… |
| CVE-2010-0224 | CE Cruzer Enterprise Usb Sandisk | – | Jan 7 | SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate… |