CVE Feed

    Dashboard / CVE / CVE-2020-13799

    CVE-2020-13799

    Western Digital has identified a security vulnerability in the Replay Protected Memory Block (RPMB) protocol as specified in multiple standards for storage device interfaces, including all versions of eMMC, UFS, and NVMe. The RPMB protocol is specified by industry standards bodies and is implemented by storage devices from multiple vendors to assist host systems in securing trusted firmware. Several scenarios have been identified in which the RPMB state may be affected by an attacker without the knowledge of the trusted component that uses the RPMB feature.

    Published:Nov 18, 2020
    Last Modified:Jun 5, 2026
    EPS:Nov 18, 2020
    EPSS Score:0.00055
    CVSS Score:6.8

    Affected Products

    Vendor
    Trustedfirmware
    Product
    Op-tee
    Vendor
    Westerndigital
    Product
    Inand Cl Em132
    Vendor
    Westerndigital
    Product
    Inand Cl Em132 Firmware
    Vendor
    Westerndigital
    Product
    Inand Ix Em132
    Vendor
    Westerndigital
    Product
    Inand Ix Em132 Firmware
    Vendor
    Westerndigital
    Product
    Inand Ix Em132 Xi
    Vendor
    Westerndigital
    Product
    Inand Ix Em132 Xi Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-45702 (CVSS 4.4) — OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on …
    CVE-2026-45614 (CVSS 4.7) — OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on …
    CVE-2026-40290 (CVSS 7.8) — OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on …
    CVE-2026-33662 (CVSS 7.5) — OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on …
    CVE-2026-33317 (CVSS 8.7) — OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on …
    CVE-2023-41325 (CVSS 7.4) — OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on …
    CVE-2022-47549 (CVSS 6.4) — An unprotected memory-access operation in optee_os in TrustedFirmware Open Portable Trusted Execution Environm…
    CVE-2022-46152 (CVSS 8.2) — OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versio…
    CVE-2021-44149 (CVSS 7.8) — An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0. The OPTEE-OS CSU driver for NXP …
    CVE-2021-36133 (CVSS 7.1) — The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resul…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High