CVE-2022-28387

Katalog CVE

CVSS 4.6 · Medium EPSS 0,49%

Kerentanan pada verbatim executive fingerprint secure ssd firmware, verbatim fingerprint secure portable hard drive firmware. Skor CVSS 3.1 4.6 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to an insecure design, they can be unlocked by an attacker who can then gain unauthorized access to the stored data. The attacker can simply use an undocumented IOCTL command that retrieves the correct password. This affects Executive Fingerprint Secure SSD GDMSFE01-INI3637-C VER1.1 and Fingerprint Secure Portable Hard Drive Part Number #53650.

Rincian

Terbit di NVD

8 Juni 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.6 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

EPSS (30 hari)

0,49% peluang dieksploitasi; lebih tinggi dari 40,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://packetstormsecurity.com/files/167527/Verbatim-Executive-Fingerprint-Secure-SSD-GDMSFE01-INI3637-C-VER1.... exploit · mailing list · advisory pihak ketiga
• http://packetstormsecurity.com/files/167531/Verbatim-Fingerprint-Secure-Portable-Hard-Drive-53650-Risky-Crypto... exploit · mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/Jun/13 exploit · mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/Jun/21 exploit · mailing list · advisory pihak ketiga
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-009.txt exploit · advisory pihak ketiga
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-014.txt exploit · advisory pihak ketiga