Bernard Van Gastel

Researcher fromRadboud University, the Netherlands, Open University of the Netherlands

#22355of 60,594

13.8Total CVSS

Vulnerabilities · 2

Medium

1

High

1

Western Digital

Western Digital Sandisk X600

A vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials.

Western Digital

The firmware update authentication method in the affected devices relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device. If this key is extracted, it could be used to install arbitrary firmware on other devices.