128 matches found
CVE-2022-28382
An issue was discovered in certain Verbatim drives through 2022-03-31. Due to the use of an insecure encryption AES mode Electronic Codebook, aka ECB, an attacker may be able to extract information even from encrypted data, for example by observing repeating byte patterns. The firmware of the...
Hardcoded credentials
An issue was discovered in certain Verbatim drives through 2022-03-31. Due to the use of an insecure encryption AES mode Electronic Codebook, aka ECB, an attacker may be able to extract information even from encrypted data, for example by observing repeating byte patterns. The firmware of the...
PT-2022-18992 · Verbatim · Verbatim Drives
Name of the Vulnerable Software and Affected Versions: Verbatim drives affected versions not specified Description: An issue was discovered in certain Verbatim drives due to insufficient firmware validation. An attacker can store malicious firmware code for the USB-to-SATA bridge controller on th...
CVE-2022-28382
An issue was discovered in certain Verbatim drives through 2022-03-31. Due to the use of an insecure encryption AES mode Electronic Codebook, aka ECB, an attacker may be able to extract information even from encrypted data, for example by observing repeating byte patterns. The firmware of the...
CVE-2022-28382
CVE-2022-28382 concerns Verbatim drives where the firmware (INIC-3637EN/ENIC-3637EN) uses AES-256 in ECB mode. This deterministic block cipher mode encrypts identical 16-byte blocks to identical ciphertext, enabling potential leakage of information from encrypted data (e.g., bitmap-like content)....
CVE-2022-28382: Use of a Broken or Risky Cryptographic Algorithm
An issue was discovered in certain Verbatim drives through 2022-03-31. Due to the use of an insecure encryption AES mode Electronic Codebook, aka ECB, an attacker may be able to extract information even from encrypted data, for example by observing repeating byte patterns. The firmware of the...
CVE-2022-28383
An issue was discovered in certain Verbatim drives through 2022-03-31. Due to insufficient firmware validation, an attacker can store malicious firmware code for the USB-to-SATA bridge controller on the USB drive e.g., by leveraging physical access during the supply chain. This code is then...
CVE-2022-28383: Improper Input Validation
An issue was discovered in certain Verbatim drives through 2022-03-31. Due to insufficient firmware validation, an attacker can store malicious firmware code for the USB-to-SATA bridge controller on the USB drive e.g., by leveraging physical access during the supply chain. This code is then...
PT-2022-30577
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to an out-of-bounds OOB write in the sata dwc 460ex component, which can cause a crash. The actual impact and attack plausibility have not yet been proven. Recommendatio...
PT-2025-8001
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.4.163 Description A vulnerability in the Linux kernel has been resolved, which was caused by an out-of-bounds OOB write in the sata dwc 460ex driver. The issue occurred because the driver used libata's "tag"...
PT-2022-7647
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue may occur in the Linux kernel when a sas task is aborted by the upper layer before handling the I/O completion in mpi ssp completion or mpi sata completion. This...
PT-2021-26827
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.4.294 Description: The issue is related to a use-after-free UAF error in the sata fsl port stop function when the sata fsl module is removed. The actual impact and attack plausibility have not yet been proven...
PT-2021-26954
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.84 Description The issue is related to a use-after-free UAF error in the sata fsl port stop function when the sata fsl module is removed. This error was introduced in version v2.6.24 and fixed in version...
PT-2021-27021
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.7 Description The issue is related to a use-after-free UAF error in the sata fsl port stop function when the sata fsl module is removed. This error was introduced in version v2.6.24 and fixed in version...
PT-2021-26844
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.292 Description: The issue is related to a use-after-free UAF error in the sata fsl port stop function when the sata fsl module is removed. This error was introduced in version v2.6.24 and fixed in version...
PT-2021-26885
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.220 Description The issue is related to a use-after-free UAF error in the sata fsl port stop function when the sata fsl module is removed. The actual impact and attack plausibility have not yet been proven...
PT-2021-26859
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.257 Description The issue is related to a use-after-free UAF error in the sata fsl port stop function when the sata fsl module is removed. This error was introduced in version v2.6.24 and fixed in version...
PT-2021-26913
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.164 Description The issue is related to a use-after-free UAF error in the sata fsl port stop function when the sata fsl module is removed. This error was introduced in version v2.6.24 and fixed in version...
