CVE-2022-28386
- EPSS 0.12%
- Veröffentlicht 08.06.2022 17:15:07
- Zuletzt bearbeitet 21.11.2024 06:57:16
An issue was discovered in certain Verbatim drives through 2022-03-31. The security feature for lockout (e.g., requiring a reformat of the drive after 20 failed unlock attempts) does not work as specified. More than 20 attempts may be made. This affe...
CVE-2022-28383
- EPSS 0.12%
- Veröffentlicht 08.06.2022 16:15:08
- Zuletzt bearbeitet 21.11.2024 06:57:15
An issue was discovered in certain Verbatim drives through 2022-03-31. Due to insufficient firmware validation, an attacker can store malicious firmware code for the USB-to-SATA bridge controller on the USB drive (e.g., by leveraging physical access ...
CVE-2022-28384
- EPSS 0.1%
- Veröffentlicht 08.06.2022 16:15:08
- Zuletzt bearbeitet 21.11.2024 06:57:16
An issue was discovered in certain Verbatim drives through 2022-03-31. Due to an insecure design, they allow an offline brute-force attack for determining the correct passcode, and thus gaining unauthorized access to the stored encrypted data. This a...
CVE-2022-28382
- EPSS 0.67%
- Veröffentlicht 08.06.2022 16:15:07
- Zuletzt bearbeitet 21.11.2024 06:57:15
An issue was discovered in certain Verbatim drives through 2022-03-31. Due to the use of an insecure encryption AES mode (Electronic Codebook, aka ECB), an attacker may be able to extract information even from encrypted data, for example by observing...