CVE-2018-12037

🗓️ 20 Nov 2018 19:00:00Reported by mitreType

An issue discovered on Samsung 840 EVO and 850 EVO devices, Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of cryptographic link between password and Disk Encryption Key allows attackers with privileged access to SSD firmware full access to encrypted data

Reporter	Title	Published	Views	Family All 9
IBM Security Bulletins	Security Bulletin: IBM FlashSystem 9100 family and IBM Storwize V7000 2076-724 (Gen3) systems are NOT affected by security vulnerabilities CVE-2018-12037 and CVE-2018-12038	29 Mar 202301:48	–	ibm
Cvelist	CVE-2018-12037	20 Nov 201819:00	–	cvelist
EUVD	EUVD-2018-4020	7 Oct 202500:30	–	euvd
Lenovo	Self-Encrypting Drive Vulnerabilities - US	31 Jan 201917:18	–	lenovo
NVD	CVE-2018-12037	20 Nov 201819:29	–	nvd
Prion	Code injection	20 Nov 201819:29	–	prion
Positive Technologies	PT-2018-10958 · Samsung +1 · Samsung T5 +6	20 Nov 201800:00	–	ptsecurity
ThreatPost	Samsung, Crucial’s Flawed Storage Drive Encryption Leaves Data Exposed	6 Nov 201816:08	–	threatpost
CERT	Self-encrypting hard drives do not adequately protect data	6 Nov 201800:00	–	cert

NVD

Node

samsung 840_evo_firmwareMatch-

AND

samsung 840_evoMatch-

Node

samsung 850_evo_firmwareMatch-

AND

samsung 850_evoMatch-

Node

samsung t3_firmwareMatch-

AND

samsung t3Match-

Node

samsung t5_firmwareMatch-

AND

samsung t5Match-

Node

micron crucial_mx100_firmwareMatch-

AND

micron crucial_mx100Match-

Node

micron crucial_mx200_firmwareMatch-

AND

micron crucial_mx200Match-

Node

micron crucial_mx300_firmwareMatch-

AND

micron crucial_mx300Match-

Source	Link
securityfocus	www.securityfocus.com/bid/105840
security	www.security.netapp.com/advisory/ntap-20181112-0001/
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180028

21 Nov 2024 03:44Current

5Medium risk

Vulners AI Score5

CVSS 21.9

CVSS 34

EPSS0.00095