Command injection

eyeDisk implements the unlock feature by sending a cleartext password. The password can be discovered by sniffing USB traffic or by sending a 06 05 52 41 01 b0 00 00 00 00 00 00 SCSI command...

CVE-2019-11885

eyeDisk implements the unlock feature by sending a cleartext password. The password can be discovered by sniffing USB traffic or by sending a 06 05 52 41 01 b0 00 00 00 00 00 00 SCSI command...

CVE-2019-11885

CVE-2019-11885: EyeDisk unlock uses a cleartext password, enabling discovery via sniffed USB traffic or a 06 05 52 41 01 b0 00 00 00 00 00 00 SCSI command. Red Hat and NVD entries corroborate this behavior. The root cause is cleartext password handling during unlock; exploitation details are not ...

CVE-2019-11885

eyeDisk implements the unlock feature by sending a cleartext password. The password can be discovered by sniffing USB traffic or by sending a 06 05 52 41 01 b0 00 00 00 00 00 00 SCSI command...