CVE-2019-10706

Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device, and if extracted could be used to install arbitrary firmware to othe...

PT-2020-9125

Name of the Vulnerable Software and Affected Versions Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices affected versions not specified Description The firmware update authentication method in the affected devices relies on a symmetric HMAC digest. The key used to validate this...

PT-2020-9199

Name of the Vulnerable Software and Affected Versions Western Digital SanDisk X300, X300s, X400, and X600 devices affected versions not specified Description A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters, such as data encryption keys,...

CVE-2019-10706: Insufficiently Protected Credentials

Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device, and if extracted could be used to install arbitrary firmware to othe...

CVE-2019-11686: Insufficiently Protected Credentials

Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters such as data encryption keys to remain on the drive media after their intended erasure...