1. CVE-Search
  2. CVE-2010-0225
ID CVE-2010-0225
Summary SanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key.
References
Vulnerable Configurations
  • cpe:2.3:o:sandisk:cruzer_enterprise_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:sandisk:cruzer_enterprise_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sandisk:cruzer_enterprise:-:*:*:*:*:*:*:*
    cpe:2.3:h:sandisk:cruzer_enterprise:-:*:*:*:*:*:*:*
CVSS
Base: 4.6 (as of 10-02-2022 - 17:04)
Impact:
Exploitability:
CWE CWE-312
CAPEC
  • Retrieve Embedded Sensitive Data
    An attacker examines a target system to find sensitive data that has been embedded within it. This information can reveal confidential contents, such as account numbers or individual keys/credentials that can be used as an intermediate step in a larger attack.
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 37677
misc
vupen ADV-2010-0078
Last major update 10-02-2022 - 17:04
Published 07-01-2010 - 19:30
Last modified 10-02-2022 - 17:04
Back to Top