ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-11686

—
CVSS 3.1
5.5 medium
EPSS
<1%p9
Published
()
Modified
Description

Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters (such as data encryption keys) to remain on the drive media after their intended erasure.

Vendors
westerndigital
Products
sandisk x600 sd9tb8w-128g firmware, sandisk x600 sd9tb8w-256g firmware, sandisk x600 sd9tb8w-512g firmware, sandisk x600 sd9tb8w-1t00 firmware, sandisk x600 sd9tb8w-2t00 firmware, sandisk x600 sd9tn8w-128g firmware, sandisk x600 sd9tn8w-256g firmware, sandisk x600 sd9tn8w-512g firmware, sandisk x600 sd9tn8w-1t00 firmware, sandisk x600 sd9tn8w-2t00 firmware, sandisk x600 sd9sb8w-128g firmware, sandisk x600 sd9sb8w-256g firmware
Weakness
CWE-522
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.