Approved changes feed: RSS · Atom

cpe:2.3:a:westerndigital:sandisk_privateaccess:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWesterndigital (31f3ce61-d65f-59c0-8a6e-4a83464a1be1)
ProductSandisk Privateaccess (705e8d86-1114-5d70-b9a3-cdf5df124d91)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-22167 vulnerable 2026-06-08 06:29:33.981343 SanDisk PrivateAccess DLL Hijacking Vulnerability
HIGH (7.9)
A potential DLL hijacking vulnerability in the SanDisk PrivateAccess application for Windows that could lead to arbitrary code execution in the context of the system user. This vulnerability is only exploitable locally if an attacker has access to a copy of the user's vault or has already gained access into a user's system. This attack is limited to the system in context and cannot be propagated.
Published: 2024-03-13T20:43:06.776Z
Updated: 2024-08-28T19:11:57.855Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22812 vulnerable 2026-06-08 05:54:27.114115 SanDisk PrivateAccess Deprecated TLS protocol versions supported
HIGH (7.4)
SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data.
Published: 2023-03-24T00:00:00.000Z
Updated: 2025-02-19T20:27:51.000Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.