CVE-2022-28383

🗓️ 08 Jun 2022 16:15:08Reported by [email protected]Type

An issue in certain Verbatim drives allows an attacker to store and execute malicious firmware code via physical access, affecting various secure USB drives and portable HDDs

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-28383	8 Jun 202216:15	–	attackerkb
Circl	CVE-2022-28383	8 Jun 202220:32	–	circl
CNNVD	Verbatim Keypad Secure USB Drive 输入验证错误漏洞	8 Jun 202200:00	–	cnnvd
CVE	CVE-2022-28383	8 Jun 202200:00	–	cve
Cvelist	CVE-2022-28383	8 Jun 202200:00	–	cvelist
EUVD	EUVD-2022-32828	3 Oct 202520:07	–	euvd
Prion	Design/Logic Flaw	8 Jun 202216:15	–	prion
Positive Technologies	PT-2022-18992 · Verbatim · Verbatim Drives	8 Jun 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-28383	23 May 202501:05	–	redhatcve

NVD

Node

verbatim keypad_secure_usb_3.2_gen_1_firmwareRange≤2022-03-31

AND

verbatim keypad_secure_usb_3.2_gen_1Match-

Node

verbatim store_'n'_go_secure_portable_hdd_firmwareRange≤2022-03-31

AND

verbatim store_'n'_go_secure_portable_hddMatch-

Node

verbatim executive_fingerprint_secure_ssd_firmwareRange≤2022-03-31

AND

verbatim executive_fingerprint_secure_ssdMatch-

Node

verbatim fingerprint_secure_portable_hard_drive_firmwareRange≤2022-03-31

AND

verbatim fingerprint_secure_portable_hard_driveMatch-

Source	Link
syss	www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-007.txt
syss	www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-016.txt
packetstormsecurity	www.packetstormsecurity.com/files/167508/Verbatim-Store-N-Go-Secure-Portable-HDD-GD25LK01-3637-C-VER4.0-Missing-Trust.html
packetstormsecurity	www.packetstormsecurity.com/files/167535/Verbatim-Fingerprint-Secure-Portable-Hard-Drive-53650-Missing-Trust.html
seclists	www.seclists.org/fulldisclosure/2022/Jun/19
packetstormsecurity	www.packetstormsecurity.com/files/167482/Verbatim-Keypad-Secure-USB-3.2-Gen-1-Drive-Missing-Control.html
packetstormsecurity	www.packetstormsecurity.com/files/167539/Verbatim-Executive-Fingerprint-Secure-SSD-GDMSFE01-INI3637-C-VER1.1-Missing-Trust.html
syss	www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-011.txt
seclists	www.seclists.org/fulldisclosure/2022/Jun/25
seclists	www.seclists.org/fulldisclosure/2022/Jun/12

21 Nov 2024 06:57Current

CVSS 24.6

CVSS 3.16.8

EPSS0.00585

CWE-20