CVE-2018-12038

—

CVSS 3.0

4.2 medium

EPSS

<1%p48

Published

Nov 20, 2018 (Nov 20, 2018)

Modified

Jun 17, 2026

Description

An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encryption key.

Vendors: samsung
Products: 840 evo firmware
Weakness: CWE-522
Vector: CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news1 stories

Self-encrypting SSDs vulnerable to encryption bypass attacks

Help Net SecurityMay 28, 11:18 UTC · May 28, 2020Vulnerability CVE-2018-12037 CVE-2018-12038

60