Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2839▼ 348 respecto a la semana anterior
Críticas / altas1378▼ 43 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior
–

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (7.5)1.3%—Westerndigital Sandisk X600 Sd9tb8w-128g FirmwareWesterndigital Sandisk X600 Sd9tb8w-256g FirmwareWesterndigital Sandisk X600 Sd9tb8w-512g FirmwareWesterndigital Sandisk X600 Sd9tb8w-1t00 Firmware+1610/3/202017/6/2026
Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials.
ModificadaMedia (5.5)0.19%—Westerndigital Sandisk X600 Sd9tb8w-128g FirmwareWesterndigital Sandisk X600 Sd9tb8w-256g FirmwareWesterndigital Sandisk X600 Sd9tb8w-512g FirmwareWesterndigital Sandisk X600 Sd9tb8w-1t00 Firmware+5510/3/202017/6/2026
Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters (such as data encryption keys) to remain on the drive media after their intended erasure.
ModificadaMedia (6.3)0.28%—Westerndigital Sandisk X600 Sd9tb8w-128g FirmwareWesterndigital Sandisk X600 Sd9tb8w-256g FirmwareWesterndigital Sandisk X600 Sd9tb8w-512g FirmwareWesterndigital Sandisk X600 Sd9tb8w-1t00 Firmware+5510/3/202017/6/2026
Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device, and if extracted could be used to install arbitrary firmware to other devices.
Orbitaley — Vulnerabilidades