Log in Start free

SanDisk

Products

ProductCVEsExploitedLatest
ibi11–Feb 5, 2024
ibi Web App2–Jun 24, 2024
ibi Mobile App1–May 8, 2023
PrivateAccess1–Mar 24, 2023
PrivateAccess Windows App1–Mar 13, 2024
SanDisk Security Installer for Windows1–Nov 15, 2023

Exploited and recent CVEs

  • CVE-2024-22168 Medium 5.9 Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps 0.3%
  • CVE-2024-22167 High 7.9 SanDisk PrivateAccess DLL Hijacking Vulnerability 0.2%
  • CVE-2023-22819 Medium 4.9 Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products 0.8%
  • CVE-2023-22817 Medium 5.5 Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products 0.2%
  • CVE-2023-22818 High 7.3 Multiple DLL Search Order hijacking Vulnerabilities in SanDisk Security Installer for Windows 0.2%
  • CVE-2022-36331 Critical 10.0 Impersonation attack causing an Authentication Bypass on Western Digital devices 0.6%
  • CVE-2022-36328 Medium 5.8 Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices 0.8%
  • CVE-2022-36327 Medium 5.8 Path traversal vulnerability leading to an arbitrary file write in Western Digital devices 1.5%
  • CVE-2022-36326 Medium 4.4 Resource Exhaustion Vulnerability in Western Digital devices 0.6%
  • CVE-2022-36329 Medium 4.4 Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices 0.3%
  • CVE-2022-36330 Low 1.9 Buffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices 0.6%
  • CVE-2023-22813 Low 3.3 Device API endpoint missing access controls on Western Digital Mobile and Web Apps 0.5%
  • CVE-2023-22813 Low 3.3 Device API endpoint missing access controls on Western Digital Mobile and Web Apps 0.5%
  • CVE-2023-22812 High 7.4 SanDisk PrivateAccess Deprecated TLS protocol versions supported 0.3%
  • CVE-2022-29837 Medium 4.7 Path traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices 0.2%
  • CVE-2022-29836 Low 1.9 Post-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP API 0.4%
  • CVE-2022-23006 Low 1.8 Buffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi 0.3%