CVE Feed

    Dashboard / CVE / CVE-2019-10706

    CVE-2019-10706

    Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device, and if extracted could be used to install arbitrary firmware to other devices.

    Published:Mar 10, 2020
    Last Modified:Nov 21, 2024
    EPS:Mar 10, 2020
    EPSS Score:0.00116
    CVSS Score:6.3

    Affected Products

    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sb6s-128g
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sb6s-128g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sb6s-256g
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sb6s-256g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sb7s-010t
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sb7s-010t Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sb7s-512g
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sb7s-512g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sf6s-128g
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sf6s-128g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sf6s-256g
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sf6s-256g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sf6s-512g
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sf6s-512g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sn6s-128g
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sn6s-128g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sn6s-256g
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sn6s-256g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sn6s-512g
    Vendor
    Westerndigital
    Product
    Sandisk X300 Sd7sn6s-512g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7sb3q-064g
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7sb3q-064g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7sn3q-064g
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7sn3q-064g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7ub2q-010t
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7ub2q-010t Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7ub2q-512g
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7ub2q-512g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7ub3q-128g
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7ub3q-128g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7ub3q-256g
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7ub3q-256g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7un3q-128g
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7un3q-128g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7un3q-256g
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7un3q-256g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7un3q-512g
    Vendor
    Westerndigital
    Product
    Sandisk X300s Sd7un3q-512g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sb8u-128g
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sb8u-128g-1122
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sb8u-128g-1122 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sb8u-128g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sb8u-1t00
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sb8u-1t00-1122
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sb8u-1t00-1122 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sb8u-1t00 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sb8u-256g
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sb8u-256g-1122
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sb8u-256g-1122 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sb8u-256g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sb8u-512g
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sb8u-512g-1122
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sb8u-512g-1122 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sb8u-512g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sn8u-128g
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sn8u-128g-1122
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sn8u-128g-1122 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sn8u-128g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sn8u-1t00
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sn8u-1t00-1122
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sn8u-1t00-1122 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sn8u-1t00 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sn8u-256g
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sn8u-256g-1122
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sn8u-256g-1122 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sn8u-256g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sn8u-512g
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sn8u-512g-1122
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sn8u-512g-1122 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8sn8u-512g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8tb8u-128g-1122
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8tb8u-128g-1122 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8tb8u-1t00-1122
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8tb8u-1t00-1122 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8tb8u-256g-1122
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8tb8u-256g-1122 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8tb8u-512g-1122
    Vendor
    Westerndigital
    Product
    Sandisk X400 Sd8tb8u-512g-1122 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sb8w-128g
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sb8w-128g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sb8w-1t00
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sb8w-1t00 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sb8w-256g
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sb8w-256g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sb8w-2t00
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sb8w-2t00 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sb8w-512g
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sb8w-512g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sn8w-128g
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sn8w-128g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sn8w-1t00
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sn8w-1t00 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sn8w-256g
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sn8w-256g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sn8w-2t00
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sn8w-2t00 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sn8w-512g
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9sn8w-512g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tb8w-128g
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tb8w-128g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tb8w-1t00
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tb8w-1t00 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tb8w-256g
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tb8w-256g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tb8w-2t00
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tb8w-2t00 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tb8w-512g
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tb8w-512g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tn8w-128g
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tn8w-128g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tn8w-1t00
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tn8w-1t00 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tn8w-256g
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tn8w-256g Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tn8w-2t00
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tn8w-2t00 Firmware
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tn8w-512g
    Vendor
    Westerndigital
    Product
    Sandisk X600 Sd9tn8w-512g Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High