CVE-2018-12037

Опубликовано: 20 нояб. 2018

Источник: nvd

CVSS3: 4

CVSS2: 1.9

EPSS Низкий

Описание

An issue was discovered on Samsung 840 EVO and 850 EVO devices (only in "ATA high" mode, not vulnerable in "TCG" or "ATA max" mode), Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of a cryptographic link between the password and the Disk Encryption Key allows attackers with privileged access to SSD firmware full access to encrypted data.

Ссылки

http://www.securityfocus.com/bid/105840
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180028
Patch
Third Party Advisory
Vendor Advisory
https://security.netapp.com/advisory/ntap-20181112-0001/
Third Party Advisory
http://www.securityfocus.com/bid/105840
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180028
Patch
Third Party Advisory
Vendor Advisory
https://security.netapp.com/advisory/ntap-20181112-0001/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:samsung:840_evo_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:840_evo:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:samsung:850_evo_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:850_evo:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:samsung:t3_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:t3:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:samsung:t5_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:t5:-:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

cpe:2.3:o:micron:crucial_mx100_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:micron:crucial_mx100:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

cpe:2.3:o:micron:crucial_mx200_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:micron:crucial_mx200:-:*:*:*:*:*:*:*

Конфигурация 7

Одновременно

cpe:2.3:o:micron:crucial_mx300_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:micron:crucial_mx300:-:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00148

Низкий

4 Medium

CVSS3

1.9 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-xpvv-pv79-cqf9

CVSS3: 4

github

больше 3 лет назад

EPSS

Процентиль: 35%

0.00148

Низкий

4 Medium

CVSS3

1.9 Low

CVSS2

Дефекты

NVD-CWE-noinfo