SanDisk PrivateAccess Software Update
WDC Tracking Number: WDC-23005
Published: March 02, 2023
Last Updated: March 02, 2023
Description
SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data. This issue has been resolved in the SanDisk PrivateAccess app version 6.4.9 and higher.
We urge our customers to install this software update immediately to keep their vaults protected. As with any upgrade, it is best to back up your data before installing the upgrade.
For other support and download information, please refer to: https://support-en.wd.com/app/answers/detailweb/a_id/36210
Advisory Summary
Updated the TLS version to TLS 1.2 for enhanced security.
CVE Number: CVE-2023-22812