Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xpvv-pv79-cqf9

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4

Описание

An issue was discovered on Samsung 840 EVO and 850 EVO devices (only in "ATA high" mode, not vulnerable in "TCG" or "ATA max" mode), Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of a cryptographic link between the password and the Disk Encryption Key allows attackers with privileged access to SSD firmware full access to encrypted data.

An issue was discovered on Samsung 840 EVO and 850 EVO devices (only in "ATA high" mode, not vulnerable in "TCG" or "ATA max" mode), Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of a cryptographic link between the password and the Disk Encryption Key allows attackers with privileged access to SSD firmware full access to encrypted data.

EPSS

Процентиль: 36%
0.00148
Низкий

4 Medium

CVSS3

Связанные уязвимости

CVSS3: 4
nvd
около 7 лет назад

An issue was discovered on Samsung 840 EVO and 850 EVO devices (only in "ATA high" mode, not vulnerable in "TCG" or "ATA max" mode), Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of a cryptographic link between the password and the Disk Encryption Key allows attackers with privileged access to SSD firmware full access to encrypted data.

EPSS

Процентиль: 36%
0.00148
Низкий

4 Medium

CVSS3