VDB
CVE-2019-10706
CVE-2019-10706
PUBLISHED
CVSS 6.300000190734863 MEDIUM
Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device, and if extracted could be used to install arbitrary firmware to other devices.
EPSS 0.12% · 30.0th percentile
Risk Scores
CVSS 3.1
6.300000190734863
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
EPSS Score
0.12%
30.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| westerndigital | sandisk_x600_sd9sb8w-256g_firmware | 0 |
| westerndigital | sandisk_x400_sd8sb8u-512g-1122_firmware | |
| westerndigital | sandisk_x600_sd9sn8w-256g_firmware | 0 |
| westerndigital | sandisk_x300_sd7sn6s-512g_firmware | |
| westerndigital | sandisk_x300s_sd7sn3q-064g_firmware | |
| westerndigital | sandisk_x300_sd7sb7s-512g_firmware | |
| westerndigital | sandisk_x400_sd8tb8u-128g-1122_firmware | |
| westerndigital | sandisk_x300s_sd7ub3q-256g_firmware | |
| westerndigital | sandisk_x300_sd7sf6s-512g_firmware | |
| westerndigital | sandisk_x300s_sd7sb3q-064g_firmware | |
| westerndigital | sandisk_x400_sd8sn8u-512g-1122_firmware | |
| westerndigital | sandisk_x600_sd9tb8w-512g_firmware | 0 |
| westerndigital | sandisk_x400_sd8sb8u-1t00-1122_firmware | |
| westerndigital | sandisk_x600_sd9sb8w-512g_firmware | 0 |
| westerndigital | sandisk_x600_sd9sn8w-512g_firmware | 0 |
| westerndigital | sandisk_x600_sd9sb8w-1t00_firmware | 0 |
| westerndigital | sandisk_x300s_sd7un3q-512g_firmware | |
| westerndigital | sandisk_x300s_sd7un3q-256g_firmware | |
| westerndigital | sandisk_x300_sd7sn6s-256g_firmware | |
| n/a | n/a | n/a |
…and 40 more
Timeline
- Mar 10, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 4, 2022 EPSS Score