CVE-2021-36750

ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users across USB drives sold under multiple brand names...

CVE-2021-36750

Summary: CVE-2021-36750 affects ENC DataVault prior to 7.2 and VaultAPI v67, where a faulty key derivation process is reported. The described vulnerability enables attackers to determine the passwords of all DataVault users across USB drives branded by multiple vendors. The root cause is describe...

CVE-2021-36750

ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users across USB drives sold under multiple brand names...