CVE-2019-10705

Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials...

x600.net Cross Site Scripting vulnerability OBB-3080017

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2019-10705

Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials...

CVE-2019-10705

Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials...

CVE-2019-10705

CVE-2019-10705 affects Western Digital SanDisk X600 SATA SSDs. The vulnerability is in the drive’s access control mechanism, potentially allowing data to be decrypted without authentication. Public materials identify this as part of a set of SED flaws (with CVEs including 2018-12037/12038 and 201...

CVE-2019-11686

CVE-2019-11686 concerns Western Digital/SanDisk self-encrypting drives (X300, X300s, X400, X600). The wear-leveling algorithm can leave cryptographic parameters (e.g., DEKs) on media after supposed erasure, potentially enabling data disclosure if an attacker accesses the drive. Connected sources ...

CVE-2019-11686: Insufficiently Protected Credentials

Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters such as data encryption keys to remain on the drive media after their intended erasure...

CVE-2019-10706: Insufficiently Protected Credentials

Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device, and if extracted could be used to install arbitrary firmware to othe...

CVE-2019-10705: Insufficiently Protected Credentials

Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials...