CVE-2019-11686

CVE-2019-11686 concerns Western Digital/SanDisk self-encrypting drives (X300, X300s, X400, X600). The wear-leveling algorithm can leave cryptographic parameters (e.g., DEKs) on media after supposed erasure, potentially enabling data disclosure if an attacker accesses the drive. Connected sources ...

CVE-2019-11686: Insufficiently Protected Credentials

Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters such as data encryption keys to remain on the drive media after their intended erasure...

PT-2020-9125

Name of the Vulnerable Software and Affected Versions Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices affected versions not specified Description The firmware update authentication method in the affected devices relies on a symmetric HMAC digest. The key used to validate this...

CVE-2019-10706: Insufficiently Protected Credentials

Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device, and if extracted could be used to install arbitrary firmware to othe...

PT-2020-9199

Name of the Vulnerable Software and Affected Versions Western Digital SanDisk X300, X300s, X400, and X600 devices affected versions not specified Description A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters, such as data encryption keys,...