CVE-2023-22812 HIGH

CVE-2023-22812: SanDisk PrivateAccess Deprecated TLS protocol versions supported

Vendor Sandisk
Product PrivateAccess
Weakness CWE-327 · Broken crypto
Published March 24, 2023
Last update February 19, 2025
View on NVD All CVEs

CVSS base score

7.4/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data.

Key dates

02Disclosure timeline

March 24, 2023 CVE published
February 19, 2025 Record updated