CVE-2018-12037

CVE-2018-12037 affects self-encrypting drives (TCG Opal/ATA‑based) where there is no cryptographic binding between the user password and the Disk Encryption Key, enabling full data access by someone with privileged access to the drive controller in ATA High mode. Affected devices per the sources ...

CVE-2018-12037: Undefined Security Weakness

An issue was discovered on Samsung 840 EVO and 850 EVO devices only in "ATA high" mode, not vulnerable in "TCG" or "ATA max" mode, Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of a cryptographic link between the password and the Disk Encryption Key allows...