CVE-2019-10705
High
Description
Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials.
SeverityHigh
CVSS7.5
Exploit probability—
ProductWesterndigital Sandisk X600 Sd9tb8w-128g Firmware
PublishedMar 10, 2020
First seenMar 10, 2020
How to fix
Update
- westerndigital sandisk_x600_sd9tb8w-128g_firmwarex6112100 or later
- westerndigital sandisk_x600_sd9tb8w-256g_firmwarex6112100 or later
- westerndigital sandisk_x600_sd9tb8w-512g_firmwarex6112100 or later
- westerndigital sandisk_x600_sd9tb8w-1t00_firmwarex6112100 or later
- westerndigital sandisk_x600_sd9tb8w-2t00_firmwarex6112100 or later
- westerndigital sandisk_x600_sd9tn8w-128g_firmwarex6112100 or later
- westerndigital sandisk_x600_sd9tn8w-256g_firmwarex6112100 or later
- westerndigital sandisk_x600_sd9tn8w-512g_firmwarex6112100 or later
- westerndigital sandisk_x600_sd9tn8w-1t00_firmwarex6112100 or later
- westerndigital sandisk_x600_sd9tn8w-2t00_firmwarex6112100 or later
- westerndigital sandisk_x600_sd9sb8w-128g_firmwarex6112100 or later
- westerndigital sandisk_x600_sd9sb8w-256g_firmwarex6112100 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| westerndigital sandisk_x600_sd9tb8w-128g_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9tb8w-256g_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9tb8w-512g_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9tb8w-1t00_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9tb8w-2t00_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9tn8w-128g_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9tn8w-256g_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9tn8w-512g_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9tn8w-1t00_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9tn8w-2t00_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9sb8w-128g_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9sb8w-256g_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9sb8w-512g_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9sb8w-1t00_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9sb8w-2t00_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9sn8w-128g_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9sn8w-256g_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9sn8w-512g_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9sn8w-1t00_firmware | v < x6112100 | x6112100 |
| westerndigital sandisk_x600_sd9sn8w-2t00_firmware | v < x6112100 | x6112100 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.