CVE-2019-10706: Medium severity westerndigital sandisk x600 sd9tb8w-128g firmware vulnerability

Published Mar 10, 2020
·
Updated

Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device, and if extracted could be used to install arbitrary firmware to other devices.

Affected Software

118 affected components
WesternDigital Sandisk X600 Sd9tb8w-128g Firmware<x6112100
WesternDigital Sandisk X600 Sd9tb8w-128g
WesternDigital Sandisk X600 Sd9tb8w-256g Firmware<x6112100
WesternDigital Sandisk X600 Sd9tb8w-256g
WesternDigital Sandisk X600 Sd9tb8w-512g Firmware<x6112100
WesternDigital Sandisk X600 Sd9tb8w-512g
WesternDigital Sandisk X600 Sd9tb8w-1t00 Firmware<x6112100
WesternDigital Sandisk X600 Sd9tb8w-1t00
WesternDigital Sandisk X600 Sd9tb8w-2t00 Firmware<x6112100
WesternDigital Sandisk X600 Sd9tb8w-2t00
WesternDigital Sandisk X600 Sd9tn8w-128g Firmware<x6112100
WesternDigital Sandisk X600 Sd9tn8w-128g
WesternDigital Sandisk X600 Sd9tn8w-256g Firmware<x6112100
WesternDigital Sandisk X600 Sd9tn8w-256g
WesternDigital Sandisk X600 Sd9tn8w-512g Firmware<x6112100
WesternDigital Sandisk X600 Sd9tn8w-512g
WesternDigital Sandisk X600 Sd9tn8w-1t00 Firmware<x6112100
WesternDigital Sandisk X600 Sd9tn8w-1t00
WesternDigital Sandisk X600 Sd9tn8w-2t00 Firmware<x6112100
WesternDigital Sandisk X600 Sd9tn8w-2t00
WesternDigital Sandisk X600 Sd9sb8w-128g Firmware<x6112100
WesternDigital Sandisk X600 Sd9sb8w-128g
WesternDigital Sandisk X600 Sd9sb8w-256g Firmware<x6112100
WesternDigital Sandisk X600 Sd9sb8w-256g
WesternDigital Sandisk X600 Sd9sb8w-512g Firmware<x6112100
WesternDigital Sandisk X600 Sd9sb8w-512g
WesternDigital Sandisk X600 Sd9sb8w-1t00 Firmware<x6112100
WesternDigital Sandisk X600 Sd9sb8w-1t00
WesternDigital Sandisk X600 Sd9sb8w-2t00 Firmware<x6112100
WesternDigital Sandisk X600 Sd9sb8w-2t00
WesternDigital Sandisk X600 Sd9sn8w-128g Firmware<x6112100
WesternDigital Sandisk X600 Sd9sn8w-128g
WesternDigital Sandisk X600 Sd9sn8w-256g Firmware<x6112100
WesternDigital Sandisk X600 Sd9sn8w-256g
WesternDigital Sandisk X600 Sd9sn8w-512g Firmware<x6112100
WesternDigital Sandisk X600 Sd9sn8w-512g
WesternDigital Sandisk X600 Sd9sn8w-1t00 Firmware<x6112100
WesternDigital Sandisk X600 Sd9sn8w-1t00
WesternDigital Sandisk X600 Sd9sn8w-2t00 Firmware<x6112100
WesternDigital Sandisk X600 Sd9sn8w-2t00
WesternDigital Sandisk X300s Sd7sb3q-064g Firmware
WesternDigital Sandisk X300s Sd7sb3q-064g
WesternDigital Sandisk X300s Sd7sn3q-064g Firmware
WesternDigital Sandisk X300s Sd7sn3q-064g
WesternDigital Sandisk X300s Sd7ub2q-010t Firmware
WesternDigital Sandisk X300s Sd7ub2q-010t
WesternDigital Sandisk X300s Sd7ub2q-512g Firmware
WesternDigital Sandisk X300s Sd7ub2q-512g
WesternDigital Sandisk X300s Sd7ub3q-128g Firmware
WesternDigital Sandisk X300s Sd7ub3q-128g
WesternDigital Sandisk X300s Sd7ub3q-256g Firmware
WesternDigital Sandisk X300s Sd7ub3q-256g
WesternDigital Sandisk X300s Sd7un3q-128g Firmware
WesternDigital Sandisk X300s Sd7un3q-128g
WesternDigital Sandisk X300s Sd7un3q-256g Firmware
WesternDigital Sandisk X300s Sd7un3q-256g
WesternDigital Sandisk X300s Sd7un3q-512g Firmware
WesternDigital Sandisk X300s Sd7un3q-512g
WesternDigital Sandisk X400 Sd8sb8u-128g Firmware
WesternDigital Sandisk X400 Sd8sb8u-128g
WesternDigital Sandisk X400 Sd8sb8u-128g-1122 Firmware
WesternDigital Sandisk X400 Sd8sb8u-128g-1122
WesternDigital Sandisk X400 Sd8sb8u-1t00 Firmware
WesternDigital Sandisk X400 Sd8sb8u-1t00
WesternDigital Sandisk X400 Sd8sb8u-1t00-1122 Firmware
WesternDigital Sandisk X400 Sd8sb8u-1t00-1122
WesternDigital Sandisk X400 Sd8sb8u-256g Firmware
WesternDigital Sandisk X400 Sd8sb8u-256g
WesternDigital Sandisk X400 Sd8sb8u-256g-1122 Firmware
WesternDigital Sandisk X400 Sd8sb8u-256g-1122
WesternDigital Sandisk X400 Sd8sb8u-512g Firmware
WesternDigital Sandisk X400 Sd8sb8u-512g
WesternDigital Sandisk X400 Sd8sb8u-512g-1122 Firmware
WesternDigital Sandisk X400 Sd8sb8u-512g-1122
WesternDigital Sandisk X400 Sd8sn8u-128g Firmware
WesternDigital Sandisk X400 Sd8sn8u-128g
WesternDigital Sandisk X400 Sd8sn8u-128g-1122 Firmware
WesternDigital Sandisk X400 Sd8sn8u-128g-1122
WesternDigital Sandisk X400 Sd8sn8u-1t00 Firmware
WesternDigital Sandisk X400 Sd8sn8u-1t00
WesternDigital Sandisk X400 Sd8sn8u-1t00-1122 Firmware
WesternDigital Sandisk X400 Sd8sn8u-1t00-1122
WesternDigital Sandisk X400 Sd8sn8u-256g Firmware
WesternDigital Sandisk X400 Sd8sn8u-256g
WesternDigital Sandisk X400 Sd8sn8u-256g-1122 Firmware
WesternDigital Sandisk X400 Sd8sn8u-256g-1122
WesternDigital Sandisk X400 Sd8sn8u-512g Firmware
WesternDigital Sandisk X400 Sd8sn8u-512g
WesternDigital Sandisk X400 Sd8sn8u-512g-1122 Firmware
WesternDigital Sandisk X400 Sd8sn8u-512g-1122
WesternDigital Sandisk X400 Sd8tb8u-128g-1122 Firmware
WesternDigital Sandisk X400 Sd8tb8u-128g-1122
WesternDigital Sandisk X400 Sd8tb8u-1t00-1122 Firmware
WesternDigital Sandisk X400 Sd8tb8u-1t00-1122
WesternDigital Sandisk X400 Sd8tb8u-256g-1122 Firmware
WesternDigital Sandisk X400 Sd8tb8u-256g-1122
WesternDigital Sandisk X400 Sd8tb8u-512g-1122 Firmware
WesternDigital Sandisk X400 Sd8tb8u-512g-1122
WesternDigital Sandisk X300 Sd7sb6s-128g Firmware
WesternDigital Sandisk X300 Sd7sb6s-128g
WesternDigital Sandisk X300 Sd7sb6s-256g Firmware
WesternDigital Sandisk X300 Sd7sb6s-256g
WesternDigital Sandisk X300 Sd7sb7s-010t Firmware
WesternDigital Sandisk X300 Sd7sb7s-010t
WesternDigital Sandisk X300 Sd7sb7s-512g Firmware
WesternDigital Sandisk X300 Sd7sb7s-512g
WesternDigital Sandisk X300 Sd7sf6s-128g Firmware
WesternDigital Sandisk X300 Sd7sf6s-128g
WesternDigital Sandisk X300 Sd7sf6s-256g Firmware
WesternDigital Sandisk X300 Sd7sf6s-256g
WesternDigital Sandisk X300 Sd7sf6s-512g Firmware
WesternDigital Sandisk X300 Sd7sf6s-512g
WesternDigital Sandisk X300 Sd7sn6s-128g Firmware
WesternDigital Sandisk X300 Sd7sn6s-128g
WesternDigital Sandisk X300 Sd7sn6s-256g Firmware
WesternDigital Sandisk X300 Sd7sn6s-256g
WesternDigital Sandisk X300 Sd7sn6s-512g Firmware
WesternDigital Sandisk X300 Sd7sn6s-512g

Event History

Mar 10, 2020
CVE Published
via MITRE·12:45 PM
Data Sourced
via MITRE·12:45 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2019-10706?

CVE-2019-10706 has been assigned a medium severity rating due to the potential for unauthorized firmware installation using extracted keys.

2

How do I fix CVE-2019-10706?

To mitigate CVE-2019-10706, updating the firmware to the latest version from Western Digital is essential to close the authentication vulnerability.

3

What products are affected by CVE-2019-10706?

CVE-2019-10706 affects Western Digital's SanDisk X300, X300s, X400, and X600 SSD devices running specific firmware versions.

4

What type of vulnerability is CVE-2019-10706?

CVE-2019-10706 is an authentication vulnerability that allows the installation of arbitrary firmware if the HMAC key is compromised.

5

Is CVE-2019-10706 actively being exploited?

As of now, there are no public reports confirming active exploitation of CVE-2019-10706.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203