CVE-2015-7269: Medium severity seagate st500lt015 firmware vulnerability
Seagate ST500LT015 hard disk drives, when operating in eDrive mode on Lenovo ThinkPad W541 laptops with BIOS 2.21, allow physically proximate attackers to bypass self-encrypting drive (SED) protection by attaching a second SATA connector to exposed pins, maintaining an alternate power source, and attaching the data cable to another machine, aka a "Hot Unplug Attack."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7269?
CVE-2015-7269 has a high severity as it allows attackers to bypass the self-encrypting drive protection.
How do I fix CVE-2015-7269?
To mitigate CVE-2015-7269, users should avoid using the affected Seagate ST500LT015 drives in eDrive mode on vulnerable Lenovo ThinkPad models.
Who is affected by CVE-2015-7269?
CVE-2015-7269 primarily affects users of Seagate ST500LT015 hard disk drives operating in eDrive mode on Lenovo ThinkPad W541 laptops with BIOS 2.21.
What exploit is described in CVE-2015-7269?
CVE-2015-7269 describes an exploit where physically proximate attackers can bypass SED protection through a second SATA connector and alternate power source.
What are the implications of CVE-2015-7269?
The implications of CVE-2015-7269 include potential unauthorized access to encrypted data on affected hard disk drives.