CVE-2022-28384

Name of the Vulnerable Software and Affected Versions Verbatim Keypad Secure USB 3.2 Gen 1 Drive versions through 2022-03-31 Verbatim Store 'n' Go Secure Portable HDD GD25LK01-3637-C VER4.0

Description An issue was discovered in certain Verbatim drives due to an insecure design, allowing an offline brute-force attack for determining the correct passcode and thus gaining unauthorized access to the stored encrypted data.

Recommendations For Verbatim Keypad Secure USB 3.2 Gen 1 Drive versions through 2022-03-31, consider disabling the keypad functionality until a secure update is available. For Verbatim Store 'n' Go Secure Portable HDD GD25LK01-3637-C VER4.0, restrict access to the device to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.