CVEs-PoC/2019/CVE-2019-13466.md

CVE-2019-13466

Description

Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control. The “generate reports” archive is protected with a hard-coded password. An application update that addresses the protection of archive encryption is available.

POC

Reference

• https://www.westerndigital.com/support/productsecurity/wdc-19009-sandisk-and-western-digital-ssd-dashboard-vulnerabilities

Github

• https://github.com/alphaSeclab/sec-daily-2019