CVE-2010-0225: Medium severity sandisk cruzer enterprise firmware vulnerability
SanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0225?
CVE-2010-0225 is rated as a high severity vulnerability due to the use of a fixed encryption key.
How do I fix CVE-2010-0225?
To fix CVE-2010-0225, you should replace affected SanDisk Cruzer Enterprise USB flash drives with updated models that utilize stronger encryption.
Who is affected by CVE-2010-0225?
Users of SanDisk Cruzer Enterprise USB flash drives with vulnerable firmware are affected by CVE-2010-0225.
What type of attack does CVE-2010-0225 allow?
CVE-2010-0225 allows physically proximate attackers to access and modify data on the USB drives by exploiting the fixed encryption key.
Is my SanDisk Cruzer Enterprise drive vulnerable to CVE-2010-0225?
Your SanDisk Cruzer Enterprise drive is vulnerable to CVE-2010-0225 if it uses the affected firmware version.