Vulnerability Details : CVE-2010-0225
SanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key.
Products affected by CVE-2010-0225
- cpe:2.3:o:sandisk:cruzer_enterprise_firmware:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2010-0225
0.03%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 6 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2010-0225
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.6
|
MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |
3.9
|
6.4
|
NIST |
CWE ids for CVE-2010-0225
-
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.Assigned by: nvd@nist.gov (Primary)
References for CVE-2010-0225
-
http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html
NIST-certified USB Flash drives with hardware encryption cracked - The H Security: News and FeaturesThird Party Advisory
-
http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_SanDisk_USB-Stick.pdf
Fehler 404 - Seite nicht gefundenBroken Link
-
http://it.slashdot.org/story/10/01/05/1734242/
Encryption Cracked On NIST-Certified Flash Drives - SlashdotThird Party Advisory
-
http://www.sandisk.com/business-solutions/enterprise/technical-support/security-bulletin-december-2009
Solutions for Data StorageVendor Advisory
-
http://blogs.zdnet.com/hardware/?p=6655
Blogs | ZDNetBroken Link
-
https://www.ironkey.com/usb-flash-drive-flaw-exposed
404 Not FoundBroken Link
-
http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9
-
http://www.vupen.com/english/advisories/2010/0078
Webmail | OVH- OVHThird Party Advisory
-
http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9
Page Not FoundBroken Link
-
http://www.securityfocus.com/bid/37677
SanDisk Cruzer Enterprise USB Flash Drives Access Control Security Bypass VulnerabilityThird Party Advisory;VDB Entry
Jump to