Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.6) | 0.49% | — | Verbatim Keypad Secure USB 3.2 GEN 1 FirmwareVerbatim Gd25lk01-3637-c Firmware | 8/6/2022 | 17/6/2026 | An issue was discovered in certain Verbatim drives through 2022-03-31. The security feature for lockout (e.g., requiring a reformat of the drive after 20 failed unlock attempts) does not work as specified. More than 20 attempts may be made. This affects Keypad Secure USB 3.2 Gen 1 Drive Part Number #49428 and Store… | |
| Modificada | Media (5.5) | 0.43% | — | Verbatim Keypad Secure USB 3.2 GEN 1 FirmwareVerbatim Store 'N' GO Secure Portable HDD Firmware | 8/6/2022 | 17/6/2026 | An issue was discovered in certain Verbatim drives through 2022-03-31. Due to an insecure design, they allow an offline brute-force attack for determining the correct passcode, and thus gaining unauthorized access to the stored encrypted data. This affects Keypad Secure USB 3.2 Gen 1 Drive Part Number #49428 and Store… | |
| Modificada | Media (6.8) | 0.59% | — | Verbatim Keypad Secure USB 3.2 GEN 1 FirmwareVerbatim Store 'N' GO Secure Portable HDD FirmwareVerbatim Executive Fingerprint Secure SSD FirmwareVerbatim Fingerprint Secure Portable Hard Drive Firmware | 8/6/2022 | 17/6/2026 | An issue was discovered in certain Verbatim drives through 2022-03-31. Due to insufficient firmware validation, an attacker can store malicious firmware code for the USB-to-SATA bridge controller on the USB drive (e.g., by leveraging physical access during the supply chain). This code is then executed. This affects… | |
| Modificada | Alta (7.5) | 1.8% | — | Verbatim Keypad Secure USB 3.2 GEN 1 FirmwareVerbatim Store 'N' GO Secure Portable HDD FirmwareVerbatim Executive Fingerprint Secure SSD FirmwareVerbatim Fingerprint Secure Portable Hard Drive Firmware | 8/6/2022 | 17/6/2026 | An issue was discovered in certain Verbatim drives through 2022-03-31. Due to the use of an insecure encryption AES mode (Electronic Codebook, aka ECB), an attacker may be able to extract information even from encrypted data, for example by observing repeating byte patterns. The firmware of the USB-to-SATA bridge… |