CWE
522
Advisory Published
Updated

CVE-2019-10706

First published: Tue Mar 10 2020(Updated: )

Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device, and if extracted could be used to install arbitrary firmware to other devices.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Westerndigital Sandisk X600 Sd9tb8w-128g Firmware<x6112100
Westerndigital Sandisk X600 Sd9tb8w-128g
Westerndigital Sandisk X600 Sd9tb8w-256g Firmware<x6112100
Westerndigital Sandisk X600 Sd9tb8w-256g
Westerndigital Sandisk X600 Sd9tb8w-512g Firmware<x6112100
Westerndigital Sandisk X600 Sd9tb8w-512g
Westerndigital Sandisk X600 Sd9tb8w-1t00 Firmware<x6112100
Westerndigital Sandisk X600 Sd9tb8w-1t00
Westerndigital Sandisk X600 Sd9tb8w-2t00 Firmware<x6112100
Westerndigital Sandisk X600 Sd9tb8w-2t00
Westerndigital Sandisk X600 Sd9tn8w-128g Firmware<x6112100
Westerndigital Sandisk X600 Sd9tn8w-128g
Westerndigital Sandisk X600 Sd9tn8w-256g Firmware<x6112100
Westerndigital Sandisk X600 Sd9tn8w-256g
Westerndigital Sandisk X600 Sd9tn8w-512g Firmware<x6112100
Westerndigital Sandisk X600 Sd9tn8w-512g
Westerndigital Sandisk X600 Sd9tn8w-1t00 Firmware<x6112100
Westerndigital Sandisk X600 Sd9tn8w-1t00
Westerndigital Sandisk X600 Sd9tn8w-2t00 Firmware<x6112100
Westerndigital Sandisk X600 Sd9tn8w-2t00
Westerndigital Sandisk X600 Sd9sb8w-128g Firmware<x6112100
Westerndigital Sandisk X600 Sd9sb8w-128g
Westerndigital Sandisk X600 Sd9sb8w-256g Firmware<x6112100
Westerndigital Sandisk X600 Sd9sb8w-256g
Westerndigital Sandisk X600 Sd9sb8w-512g Firmware<x6112100
Westerndigital Sandisk X600 Sd9sb8w-512g
Westerndigital Sandisk X600 Sd9sb8w-1t00 Firmware<x6112100
Westerndigital Sandisk X600 Sd9sb8w-1t00
Westerndigital Sandisk X600 Sd9sb8w-2t00 Firmware<x6112100
Westerndigital Sandisk X600 Sd9sb8w-2t00
Westerndigital Sandisk X600 Sd9sn8w-128g Firmware<x6112100
Westerndigital Sandisk X600 Sd9sn8w-128g
Westerndigital Sandisk X600 Sd9sn8w-256g Firmware<x6112100
Westerndigital Sandisk X600 Sd9sn8w-256g
Westerndigital Sandisk X600 Sd9sn8w-512g Firmware<x6112100
Westerndigital Sandisk X600 Sd9sn8w-512g
Westerndigital Sandisk X600 Sd9sn8w-1t00 Firmware<x6112100
Westerndigital Sandisk X600 Sd9sn8w-1t00
Westerndigital Sandisk X600 Sd9sn8w-2t00 Firmware<x6112100
Westerndigital Sandisk X600 Sd9sn8w-2t00
Westerndigital Sandisk X300s Sd7sb3q-064g Firmware
Westerndigital Sandisk X300s Sd7sb3q-064g
Westerndigital Sandisk X300s Sd7sn3q-064g Firmware
Westerndigital Sandisk X300s Sd7sn3q-064g
Westerndigital Sandisk X300s Sd7ub2q-010t Firmware
Westerndigital Sandisk X300s Sd7ub2q-010t
Westerndigital Sandisk X300s Sd7ub2q-512g Firmware
Westerndigital Sandisk X300s Sd7ub2q-512g
Westerndigital Sandisk X300s Sd7ub3q-128g Firmware
Westerndigital Sandisk X300s Sd7ub3q-128g
Westerndigital Sandisk X300s Sd7ub3q-256g Firmware
Westerndigital Sandisk X300s Sd7ub3q-256g
Westerndigital Sandisk X300s Sd7un3q-128g Firmware
Westerndigital Sandisk X300s Sd7un3q-128g
Westerndigital Sandisk X300s Sd7un3q-256g Firmware
Westerndigital Sandisk X300s Sd7un3q-256g
Westerndigital Sandisk X300s Sd7un3q-512g Firmware
Westerndigital Sandisk X300s Sd7un3q-512g
Westerndigital Sandisk X400 Sd8sb8u-128g Firmware
Westerndigital Sandisk X400 Sd8sb8u-128g
Westerndigital Sandisk X400 Sd8sb8u-128g-1122 Firmware
Westerndigital Sandisk X400 Sd8sb8u-128g-1122
Westerndigital Sandisk X400 Sd8sb8u-1t00 Firmware
Westerndigital Sandisk X400 Sd8sb8u-1t00
Westerndigital Sandisk X400 Sd8sb8u-1t00-1122 Firmware
Westerndigital Sandisk X400 Sd8sb8u-1t00-1122
Westerndigital Sandisk X400 Sd8sb8u-256g Firmware
Westerndigital Sandisk X400 Sd8sb8u-256g
Westerndigital Sandisk X400 Sd8sb8u-256g-1122 Firmware
Westerndigital Sandisk X400 Sd8sb8u-256g-1122
Westerndigital Sandisk X400 Sd8sb8u-512g Firmware
Westerndigital Sandisk X400 Sd8sb8u-512g
Westerndigital Sandisk X400 Sd8sb8u-512g-1122 Firmware
Westerndigital Sandisk X400 Sd8sb8u-512g-1122
Westerndigital Sandisk X400 Sd8sn8u-128g Firmware
Westerndigital Sandisk X400 Sd8sn8u-128g
Westerndigital Sandisk X400 Sd8sn8u-128g-1122 Firmware
Westerndigital Sandisk X400 Sd8sn8u-128g-1122
Westerndigital Sandisk X400 Sd8sn8u-1t00 Firmware
Westerndigital Sandisk X400 Sd8sn8u-1t00
Westerndigital Sandisk X400 Sd8sn8u-1t00-1122 Firmware
Westerndigital Sandisk X400 Sd8sn8u-1t00-1122
Westerndigital Sandisk X400 Sd8sn8u-256g Firmware
Westerndigital Sandisk X400 Sd8sn8u-256g
Westerndigital Sandisk X400 Sd8sn8u-256g-1122 Firmware
Westerndigital Sandisk X400 Sd8sn8u-256g-1122
Westerndigital Sandisk X400 Sd8sn8u-512g Firmware
Westerndigital Sandisk X400 Sd8sn8u-512g
Westerndigital Sandisk X400 Sd8sn8u-512g-1122 Firmware
Westerndigital Sandisk X400 Sd8sn8u-512g-1122
Westerndigital Sandisk X400 Sd8tb8u-128g-1122 Firmware
Westerndigital Sandisk X400 Sd8tb8u-128g-1122
Westerndigital Sandisk X400 Sd8tb8u-1t00-1122 Firmware
Westerndigital Sandisk X400 Sd8tb8u-1t00-1122
Westerndigital Sandisk X400 Sd8tb8u-256g-1122 Firmware
Westerndigital Sandisk X400 Sd8tb8u-256g-1122
Westerndigital Sandisk X400 Sd8tb8u-512g-1122 Firmware
Westerndigital Sandisk X400 Sd8tb8u-512g-1122
Westerndigital Sandisk X300 Sd7sb6s-128g Firmware
Westerndigital Sandisk X300 Sd7sb6s-128g
Westerndigital Sandisk X300 Sd7sb6s-256g Firmware
Westerndigital Sandisk X300 Sd7sb6s-256g
Westerndigital Sandisk X300 Sd7sb7s-010t Firmware
Westerndigital Sandisk X300 Sd7sb7s-010t
Westerndigital Sandisk X300 Sd7sb7s-512g Firmware
Westerndigital Sandisk X300 Sd7sb7s-512g
Westerndigital Sandisk X300 Sd7sf6s-128g Firmware
Westerndigital Sandisk X300 Sd7sf6s-128g
Westerndigital Sandisk X300 Sd7sf6s-256g Firmware
Westerndigital Sandisk X300 Sd7sf6s-256g
Westerndigital Sandisk X300 Sd7sf6s-512g Firmware
Westerndigital Sandisk X300 Sd7sf6s-512g
Westerndigital Sandisk X300 Sd7sn6s-128g Firmware
Westerndigital Sandisk X300 Sd7sn6s-128g
Westerndigital Sandisk X300 Sd7sn6s-256g Firmware
Westerndigital Sandisk X300 Sd7sn6s-256g
Westerndigital Sandisk X300 Sd7sn6s-512g Firmware
Westerndigital Sandisk X300 Sd7sn6s-512g

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203