CVE-2010-0222

The CVE-2010-0222 entry concerns Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB drives that use a fixed 256-bit key to obtain access to cleartext contents. Root cause: a fixed hardware-encryption key. Impact: en...

PT-2007-6496 · Microsoft · Activesync

Name of the Vulnerable Software and Affected Versions: Microsoft ActiveSync version 4.1 Description: The issue concerns the use of weak encryption, specifically XOR obfuscation with a fixed key, when sending the user's PIN/Password over the USB connection from the host to the device. This might...

Dameware Mini Remote Control Version 4.2 – Weak Key Agreement Scheme

Title: Dameware Mini Remote Control Version 4.2 – Weak Key Agreement Scheme Versions: Dameware Mini Remote Control Version 4.2 Vulnerability: The latest version of Dameware’s Mini Remote Control System uses a weak key agreement scheme. The scheme consists of the sharing of pointers into a fixed k...