EUVD-2018-4021

Malware in sbrugna...

CVE-2018-12038

An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encryption key...

Command injection

An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encryption key...

CVE-2018-12037

CVE-2018-12037 affects self-encrypting drives (TCG Opal/ATA‑based) where there is no cryptographic binding between the user password and the Disk Encryption Key, enabling full data access by someone with privileged access to the drive controller in ATA High mode. Affected devices per the sources ...

CVE-2018-12038

An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encryption key...

CVE-2018-12038

CVE-2018-12038 is a hardware-encryption vulnerability affecting self-encrypting drives (e.g., Samsung 840 EVO, MX100/MX200/MX300, Samsung T3/T5) where wear-leveling and weak binding between the user password and the disk-encryption key can allow an attacker with physical access to recover data. T...