CVE-2019-13466

Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control. The “generate reports” archive is protected with a hard-coded password. An application update that addresses the protection of archive encryption is available.

• CWE-798

• https://support.wdc.com/downloads.aspx?g=907&lang=enVendor Advisory
• https://www.westerndigital.com/support/productsecurity/wdc-19009-sandisk-and-western-digital-ssd-dashboard-vulnerabilitiesPatch, Vendor Advisory
• https://support.wdc.com/downloads.aspx?g=907&lang=enVendor Advisory
• https://www.westerndigital.com/support/productsecurity/wdc-19009-sandisk-and-western-digital-ssd-dashboard-vulnerabilitiesPatch, Vendor Advisory

Published

Sep 30, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1346A denial of service vulnerability exists when Windows improp…6.5
• CVE-2019-13461In PrestaShop before 1.7.6.0 RC2, the id_address_delivery an…
• CVE-2019-13462Lansweeper before 7.1.117.4 allows unauthenticated SQL injec…
• CVE-2019-13463An XSS vulnerability in qcopd-shortcode-generator.php in the…6.1
• CVE-2019-13464An issue was discovered in OWASP ModSecurity Core Rule Set (…
• CVE-2019-13465An issue was discovered in the ROS communications-related pa…8.6
• CVE-2019-13467Description: Western Digital SSD Dashboard before 2.5.1.0 an…5.9
• CVE-2019-1347A denial of service vulnerability exists when Windows improp…6.5
• CVE-2019-13470MatrixSSL before 4.2.1 has an out-of-bounds read during ASN.…
• CVE-2019-13472PHPWind 9.1.0 has XSS vulnerabilities in the c and m paramet…
• CVE-2019-13473TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imp…9.8
• CVE-2019-13474TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imp…9.8