6.3
CVSSv2

CVE-2019-10706

Published: 10/03/2020 Updated: 13/03/2020
CVSS v2 Base Score: 6.3 | Impact Score: 9.2 | Exploitability Score: 3.4
CVSS v3 Base Score: 6.3 | Impact Score: 5.2 | Exploitability Score: 1
VMScore: 561
Vector: AV:L/AC:M/Au:N/C:N/I:C/A:C

Vulnerability Summary

Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device, and if extracted could be used to install arbitrary firmware to other devices.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

westerndigital sandisk x600 sd9tb8w-128g firmware

westerndigital sandisk x600 sd9tb8w-256g firmware

westerndigital sandisk x600 sd9tb8w-512g firmware

westerndigital sandisk x600 sd9tb8w-1t00 firmware

westerndigital sandisk x600 sd9tb8w-2t00 firmware

westerndigital sandisk x600 sd9tn8w-128g firmware

westerndigital sandisk x600 sd9tn8w-256g firmware

westerndigital sandisk x600 sd9tn8w-512g firmware

westerndigital sandisk x600 sd9tn8w-1t00 firmware

westerndigital sandisk x600 sd9tn8w-2t00 firmware

westerndigital sandisk x600 sd9sb8w-128g firmware

westerndigital sandisk x600 sd9sb8w-256g firmware

westerndigital sandisk x600 sd9sb8w-512g firmware

westerndigital sandisk x600 sd9sb8w-1t00 firmware

westerndigital sandisk x600 sd9sb8w-2t00 firmware

westerndigital sandisk x600 sd9sn8w-128g firmware

westerndigital sandisk x600 sd9sn8w-256g firmware

westerndigital sandisk x600 sd9sn8w-512g firmware

westerndigital sandisk x600 sd9sn8w-1t00 firmware

westerndigital sandisk x600 sd9sn8w-2t00 firmware

westerndigital sandisk x300s sd7sb3q-064g firmware -

westerndigital sandisk x300s sd7sn3q-064g firmware -

westerndigital sandisk x300s sd7ub2q-010t firmware -

westerndigital sandisk x300s sd7ub2q-512g firmware -

westerndigital sandisk x300s sd7ub3q-128g firmware -

westerndigital sandisk x300s sd7ub3q-256g firmware -

westerndigital sandisk x300s sd7un3q-128g firmware -

westerndigital sandisk x300s sd7un3q-256g firmware -

westerndigital sandisk x300s sd7un3q-512g firmware -

westerndigital sandisk x400 sd8sb8u-128g firmware -

westerndigital sandisk x400 sd8sb8u-128g-1122 firmware -

westerndigital sandisk x400 sd8sb8u-1t00 firmware -

westerndigital sandisk x400 sd8sb8u-1t00-1122 firmware -

westerndigital sandisk x400 sd8sb8u-256g firmware -

westerndigital sandisk x400 sd8sb8u-256g-1122 firmware -

westerndigital sandisk x400 sd8sb8u-512g firmware -

westerndigital sandisk x400 sd8sb8u-512g-1122 firmware -

westerndigital sandisk x400 sd8sn8u-128g firmware -

westerndigital sandisk x400 sd8sn8u-128g-1122 firmware -

westerndigital sandisk x400 sd8sn8u-1t00 firmware -

westerndigital sandisk x400 sd8sn8u-1t00-1122 firmware -

westerndigital sandisk x400 sd8sn8u-256g firmware -

westerndigital sandisk x400 sd8sn8u-256g-1122 firmware -

westerndigital sandisk x400 sd8sn8u-512g firmware -

westerndigital sandisk x400 sd8sn8u-512g-1122 firmware -

westerndigital sandisk x400 sd8tb8u-128g-1122 firmware -

westerndigital sandisk x400 sd8tb8u-1t00-1122 firmware -

westerndigital sandisk x400 sd8tb8u-256g-1122 firmware -

westerndigital sandisk x400 sd8tb8u-512g-1122 firmware -

westerndigital sandisk x300 sd7sb6s-128g firmware -

westerndigital sandisk x300 sd7sb6s-256g firmware -

westerndigital sandisk x300 sd7sb7s-010t firmware -

westerndigital sandisk x300 sd7sb7s-512g firmware -

westerndigital sandisk x300 sd7sf6s-128g firmware -

westerndigital sandisk x300 sd7sf6s-256g firmware -

westerndigital sandisk x300 sd7sf6s-512g firmware -

westerndigital sandisk x300 sd7sn6s-128g firmware -

westerndigital sandisk x300 sd7sn6s-256g firmware -

westerndigital sandisk x300 sd7sn6s-512g firmware -