9 matches found
EUVD-2018-4021
Malware in sbrugna...
Command injection
An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encryption key...
CVE-2018-12038
An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encryption key...
CVE-2018-12037
CVE-2018-12037 affects self-encrypting drives (TCG Opal/ATA‑based) where there is no cryptographic binding between the user password and the Disk Encryption Key, enabling full data access by someone with privileged access to the drive controller in ATA High mode. Affected devices per the sources ...
CVE-2018-12038
An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encryption key...
CVE-2018-12038
CVE-2018-12038 is a hardware-encryption vulnerability affecting self-encrypting drives (e.g., Samsung 840 EVO, MX100/MX200/MX300, Samsung T3/T5) where wear-leveling and weak binding between the user password and the disk-encryption key can allow an attacker with physical access to recover data. T...
PT-2018-10959
Name of the Vulnerable Software and Affected Versions Samsung 840 EVO affected versions not specified Description An issue was discovered that may allow access to the disk-encryption key through vendor-specific commands. Recommendations At the moment, there is no information about a newer version...
CVE-2018-12037: Undefined Security Weakness
An issue was discovered on Samsung 840 EVO and 850 EVO devices only in "ATA high" mode, not vulnerable in "TCG" or "ATA max" mode, Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of a cryptographic link between the password and the Disk Encryption Key allows...