Lucene search

K
cveMitreCVE-2010-0229
HistoryJan 07, 2010 - 7:30 p.m.

CVE-2010-0229

2010-01-0719:30:00
CWE-255
mitre
web.nvd.nist.gov
24
verbatim
corporate
secure
fips
usb
flash drives
vulnerability
password replay
nvd
cve-2010-0229

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

34.0%

Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time.

Affected configurations

Nvd
Node
verbatimcorporate_secure
OR
verbatimcorporate_securefips
VendorProductVersionCPE
verbatimcorporate_secure*cpe:2.3:h:verbatim:corporate_secure:*:*:*:*:*:*:*:*
verbatimcorporate_secure*cpe:2.3:h:verbatim:corporate_secure:*:*:fips:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

34.0%

Related for CVE-2010-0229