CVE-2010-0225
Severity Score
4.6
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
SanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key.
Los dispositivos flash USB SanDisk Cruzer Enterprise utilizan una solución de clave de 256-bit para obtener acceso al contenido del dispositivo en texto plano, lo que hace más fácil a atacantes físicamente próximos leer o modificar información determinando y proporcionando esta clave.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-01-07 CVE Reserved
- 2010-01-07 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-312: Cleartext Storage of Sensitive Information
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://blogs.zdnet.com/hardware/?p=6655 | Broken Link | |
| http://it.slashdot.org/story/10/01/05/1734242 | Third Party Advisory | |
| http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html | Third Party Advisory | |
| http://www.securityfocus.com/bid/37677 | Third Party Advisory | |
| http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_SanDisk_USB-Stick.pdf | Broken Link | |
| http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9 | X_refsource_misc | |
| http://www.vupen.com/english/advisories/2010/0078 | Third Party Advisory | |
| https://www.ironkey.com/usb-flash-drive-flaw-exposed | Broken Link |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Sandisk Search vendor "Sandisk" | Cruzer Enterprise Firmware Search vendor "Sandisk" for product "Cruzer Enterprise Firmware" | - | - |
Affected
| in | Sandisk Search vendor "Sandisk" | Cruzer Enterprise Search vendor "Sandisk" for product "Cruzer Enterprise" | - | - |
Safe
|