CVE-2022-28387
An issue was discovered in certain Verbatim drives through 2022-03-31. Due to an insecure design, they can be unlocked by an attacker who can then gain unauthorized access to the stored data. The attacker can simply use an undocumented IOCTL command that retrieves the correct password. This affects Executive Fingerprint Secure SSD GDMSFE01-INI3637-C VER1.1 and Fingerprint Secure Portable Hard Drive Part Number #53650.
Published:Jun 8, 2022
Last Modified:Nov 21, 2024
EPS:Jun 8, 2022
EPSS Score:0.00195
CVSS Score:4.6
Affected Products
Vendor
Product
Action
Vendor
Verbatim
Product
Executive Fingerprint Secure Ssd
Verbatim
Executive Fingerprint Secure Ssd
Vendor
Verbatim
Product
Executive Fingerprint Secure Ssd Firmware
Verbatim
Executive Fingerprint Secure Ssd Firmware
Vendor
Verbatim
Product
Fingerprint Secure Portable Hard Drive
Verbatim
Fingerprint Secure Portable Hard Drive
Vendor
Verbatim
Product
Fingerprint Secure Portable Hard Drive Firmware
Verbatim
Fingerprint Secure Portable Hard Drive Firmware
Exploits
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
