CVE-2010-0222
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
20.6%
Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| kingston | datatraveler_blackbox | * | cpe:2.3:h:kingston:datatraveler_blackbox:*:*:*:*:*:*:*:* |
| kingston | datatraveler_elite | * | cpe:2.3:h:kingston:datatraveler_elite:*:*:privacy:*:*:*:*:* |
| kingston | datatraveler_secure | * | cpe:2.3:h:kingston:datatraveler_secure:*:*:privacy:*:*:*:*:* |
References
blogs.zdnet.com/hardware/?p=6655
it.slashdot.org/story/10/01/05/1734242/
news.zdnet.co.uk/security/0%2C1000000189%2C39963327%2C00.htm
www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html
www.kingston.com/driveupdate/
www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf
www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9
www.vupen.com/english/advisories/2010/0080
www.ironkey.com/usb-flash-drive-flaw-exposed
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
20.6%