CVE-2017-16560

CVE-2017-16560 is a medium-severity vulnerability in Sandisk Secureaccess with a CVSS 3.x base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-922.

Key facts

Description

SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indefinitely in certain situations, such as if the file is being edited when the user exits the application or if the application crashes.

Frequently asked questions

What is CVE-2017-16560?
SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indefinitely in certain situations, such as if the file is being edited when the user exits the application or if the application crashes.
How severe is CVE-2017-16560?
CVE-2017-16560 has a CVSS 3.x base score of 4.3, rated medium severity. It is exploitable over physical access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.
Is CVE-2017-16560 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (34th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2017-16560?
CVE-2017-16560 affects Sandisk Secureaccess. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2017-16560?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2017-16560 published?
CVE-2017-16560 was published on 2017-11-16 and last updated on 2026-06-17.

References

Affected products (1)

More vulnerabilities in Sandisk Secureaccess

All CVEs affecting Sandisk Secureaccess →

Other CWE-922 vulnerabilities

Browse all CWE-922 vulnerabilities →