CVE-2023-1526

Certain DesignJet and PageWide XL TAA compliant models may have risk of potential information disclosure if the hard disk drive is physically removed from the printer...

PT-2023-17054 · Hewlett Packard · Pagewide Xl +1

Name of the Vulnerable Software and Affected Versions: HP DesignJet and PageWide XL TAA compliant models affected versions not specified Description: The issue concerns the potential disclosure of information if the hard disk drive is physically removed from certain printer models. There is no...

The weirdest security stories of 2022

Theres been a lot of weird and frankly bizarre attacks over the course of 2022, nestled in amongst the usual ransomware outbreaks and data breaches. Whether were talking social media, email, or even malware, theres been a mind bending tale of tall behaviour in almost every corner. Its time to...

Bad rhythm: Janet Jackson song resonates poorly with some old hard drives

Janet Jacksons Rhythm Nation music video would have caused quite the commotion back in the old Windows XP days. If youre still running a certain model of an OEM hard drive from the Windows XP days, you may still be liable to experience the same thing today. However, said commotion was not solely...

CVE-2022-38392

CVE-2022-38392 concerns certain 5400 RPM hard drives (e.g., Seagate STDT4000100) from laptops/PCs circa 2005 and later. The description documents a denial-of-service by physical proximity via a resonant-frequency attack using the Rhythm Nation audio signal, potentially causing device malfunction ...

Seagate STDT4000100 安全漏洞

The Seagate STDT4000100 is a mechanical hard drive from Seagate USA. A security vulnerability exists in the Seagate STDT4000100 hard drive that originates from a physical attacker being able to exploit the audio signal of the Rhythm Nation music video to perform a resonant frequency attack, which...

CVE-2022-28387

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to an insecure design, they can be unlocked by an attacker who can then gain unauthorized access to the stored data. The attacker can simply use an undocumented IOCTL command that retrieves the correct password. This affec...

CVE-2022-28387

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to an insecure design, they can be unlocked by an attacker who can then gain unauthorized access to the stored data. The attacker can simply use an undocumented IOCTL command that retrieves the correct password. This affec...

CVE-2022-28383

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to insufficient firmware validation, an attacker can store malicious firmware code for the USB-to-SATA bridge controller on the USB drive e.g., by leveraging physical access during the supply chain. This code is then...

CVE-2022-28383

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to insufficient firmware validation, an attacker can store malicious firmware code for the USB-to-SATA bridge controller on the USB drive e.g., by leveraging physical access during the supply chain. This code is then...

CVE-2022-28387

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to an insecure design, they can be unlocked by an attacker who can then gain unauthorized access to the stored data. The attacker can simply use an undocumented IOCTL command that retrieves the correct password. This affec...

CVE-2022-28382

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to the use of an insecure encryption AES mode Electronic Codebook, aka ECB, an attacker may be able to extract information even from encrypted data, for example by observing repeating byte patterns. The firmware of the...

Input validation

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to missing integrity checks, an attacker can manipulate the content of the emulated CD-ROM drive containing the Windows and macOS client software. The content of this emulated CD-ROM drive is stored as an ISO-9660 image in...

Design/Logic Flaw

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to an insecure design, they can be unlocked by an attacker who can then gain unauthorized access to the stored data. The attacker can simply use an undocumented IOCTL command that retrieves the correct password. This affec...

CVE-2022-28387

CVE-2022-28387 describes an insecure design in certain Verbatim drives up to 2022-03-31 that allows an attacker to unlock the device and gain unauthorized access to stored data by using an undocumented IOCTL command to retrieve the correct password. Affected devices include the Executive Fingerpr...

PT-2022-18992 · Verbatim · Verbatim Drives

Name of the Vulnerable Software and Affected Versions: Verbatim drives affected versions not specified Description: An issue was discovered in certain Verbatim drives due to insufficient firmware validation. An attacker can store malicious firmware code for the USB-to-SATA bridge controller on th...

CVE-2022-28382

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to the use of an insecure encryption AES mode Electronic Codebook, aka ECB, an attacker may be able to extract information even from encrypted data, for example by observing repeating byte patterns. The firmware of the...

PT-2022-18996

Name of the Vulnerable Software and Affected Versions Verbatim Executive Fingerprint Secure SSD GDMSFE01-INI3637-C version VER1.1 Verbatim Fingerprint Secure Portable Hard Drive Part Number 53650 affected versions not specified Description An issue was discovered in certain Verbatim drives due to...

PT-2022-18994

Name of the Vulnerable Software and Affected Versions Verbatim Executive Fingerprint Secure SSD GDMSFE01-INI3637-C VER1.1 Verbatim Fingerprint Secure Portable Hard Drive Part Number 53650 Description An issue was discovered in certain Verbatim drives due to missing integrity checks, allowing an...

CVE-2022-28385: Insufficient Verification of Data Authenticity

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to missing integrity checks, an attacker can manipulate the content of the emulated CD-ROM drive containing the Windows and macOS client software. The content of this emulated CD-ROM drive is stored as an ISO-9660 image in...