High severity7.4NVD Advisory· Published Mar 24, 2023· Updated Jun 17, 2026

CVE-2023-22812

Description

SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Westerndigital/Sandisk Privateaccess2 versions
cpe:2.3:a:westerndigital:sandisk_privateaccess:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:westerndigital:sandisk_privateaccess:*:*:*:*:*:*:*:*range: <6.4.9
- (no CPE)range: <6.4.9
Sandisk/PrivateAccesscpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

www.westerndigital.com/support/product-security/wdc-23005-sandisk-privateaccess-software-updatenvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.481
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000