SanDisk records
8 published records for vendor sandisk.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-255 Credentials Management Errors2
- CWE-307 Improper Restriction of Excessive Authentication Attempts1
- CWE-312 Cleartext Storage of Sensitive Information1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-798 Use of Hard-coded Credentials1
- CWE-922 Insecure Storage of Sensitive Information1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2021-36750Proof of concept | ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVauzendesk · enc datavault · CWE-307 | High8.1 | — | 13.5% | Dec 22, 2021 |
30Monitor | CVE-2019-13466No exploit | Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control.sandisk · ssd dashboard · CWE-798 | High7.5 | — | 0.6% | Sep 30, 2019 |
23Monitor | CVE-2019-13467No exploit | Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 applications are potentially vulnerable tsandisk · ssd dashboard | Medium5.9 | — | 1.5% | Sep 30, 2019 |
23Monitor | CVE-2024-22168No exploit | Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Appswestern digital · my cloud home web app · CWE-79 | Medium5.9 | — | 0.3% | Jun 24, 2024 |
18Monitor | CVE-2010-0224No exploit | SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host computer rather than the device hardware, wsandisk · cruzer enterprise usb · CWE-255 | Medium4.6 | — | 0.3% | Jan 7, 2010 |
18Monitor | CVE-2010-0226No exploit | SanDisk Cruzer Enterprise USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access thesandisk · cruzer enterprise usb · CWE-255 | Medium4.6 | — | 0.3% | Jan 7, 2010 |
18Monitor | CVE-2010-0225No exploit | SanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easisandisk · cruzer enterprise firmware · CWE-312 | Medium4.6 | — | 0.2% | Jan 7, 2010 |
17Monitor | CVE-2017-16560No exploit | SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indefinitely in certain sisandisk · secureaccess · CWE-922 | Medium4.3 | — | 0.4% | Nov 16, 2017 |
- CVE-2021-3675036Monitor
ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVau
HighCVSS 8.1Proof of conceptEPSS 13%zendesk · enc datavaultDec 22, 2021
- CVE-2019-1346630Monitor
Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control.
HighCVSS 7.5No exploitEPSS 0%sandisk · ssd dashboardSep 30, 2019
- CVE-2019-1346723Monitor
Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 applications are potentially vulnerable t
MediumCVSS 5.9No exploitEPSS 1%sandisk · ssd dashboardSep 30, 2019
- CVE-2024-2216823Monitor
Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps
MediumCVSS 5.9No exploitEPSS 0%western digital · my cloud home web appJun 24, 2024
- CVE-2010-022418Monitor
SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host computer rather than the device hardware, w
MediumCVSS 4.6No exploitEPSS 0%sandisk · cruzer enterprise usbJan 7, 2010
- CVE-2010-022618Monitor
SanDisk Cruzer Enterprise USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the
MediumCVSS 4.6No exploitEPSS 0%sandisk · cruzer enterprise usbJan 7, 2010
- CVE-2010-022518Monitor
SanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easi
MediumCVSS 4.6No exploitEPSS 0%sandisk · cruzer enterprise firmwareJan 7, 2010
- CVE-2017-1656017Monitor
SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indefinitely in certain si
MediumCVSS 4.3No exploitEPSS 0%sandisk · secureaccessNov 16, 2017