What is the severity of CVE-2019-11686?

CVE-2019-11686 has a medium severity level as it allows cryptographically sensitive data to remain on the drive after intended erasure.

How do I fix CVE-2019-11686?

To mitigate CVE-2019-11686, users should update to the firmware version x6112100 or later for affected Western Digital SSDs.

Which devices are affected by CVE-2019-11686?

CVE-2019-11686 affects Western Digital SanDisk X300, X300s, X400, and X600 devices.

What type of vulnerability is CVE-2019-11686?

CVE-2019-11686 is a vulnerability in the wear-leveling algorithm of certain SSDs, affecting the erasure of cryptographic keys.

Is data at risk due to CVE-2019-11686?

Yes, data encryption keys and other sensitive parameters may still be recoverable from the drive, posing a security risk.

Vulnerability/
CVE-2019-11686

medium

5.5

CWE

522

10/3/2020

4/8/2024

CVE-2019-11686

First published: Tue Mar 10 2020(Updated: )

Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters (such as data encryption keys) to remain on the drive media after their intended erasure.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Westerndigital Sandisk X600 Sd9tb8w-128g Firmware	<x6112100
Westerndigital Sandisk X600 Sd9tb8w-128g
Westerndigital Sandisk X600 Sd9tb8w-256g Firmware	<x6112100
Westerndigital Sandisk X600 Sd9tb8w-256g
Westerndigital Sandisk X600 Sd9tb8w-512g Firmware	<x6112100
Westerndigital Sandisk X600 Sd9tb8w-512g
Westerndigital Sandisk X600 Sd9tb8w-1t00 Firmware	<x6112100
Westerndigital Sandisk X600 Sd9tb8w-1t00
Westerndigital Sandisk X600 Sd9tb8w-2t00 Firmware	<x6112100
Westerndigital Sandisk X600 Sd9tb8w-2t00
Westerndigital Sandisk X600 Sd9tn8w-128g Firmware	<x6112100
Westerndigital Sandisk X600 Sd9tn8w-128g
Westerndigital Sandisk X600 Sd9tn8w-256g Firmware	<x6112100
Westerndigital Sandisk X600 Sd9tn8w-256g
Westerndigital Sandisk X600 Sd9tn8w-512g Firmware	<x6112100
Westerndigital Sandisk X600 Sd9tn8w-512g
Westerndigital Sandisk X600 Sd9tn8w-1t00 Firmware	<x6112100
Westerndigital Sandisk X600 Sd9tn8w-1t00
Westerndigital Sandisk X600 Sd9tn8w-2t00 Firmware	<x6112100
Westerndigital Sandisk X600 Sd9tn8w-2t00
Westerndigital Sandisk X600 Sd9sb8w-128g Firmware	<x6112100
Westerndigital Sandisk X600 Sd9sb8w-128g
Westerndigital Sandisk X600 Sd9sb8w-256g Firmware	<x6112100
Westerndigital Sandisk X600 Sd9sb8w-256g
Westerndigital Sandisk X600 Sd9sb8w-512g Firmware	<x6112100
Westerndigital Sandisk X600 Sd9sb8w-512g
Westerndigital Sandisk X600 Sd9sb8w-1t00 Firmware	<x6112100
Westerndigital Sandisk X600 Sd9sb8w-1t00
Westerndigital Sandisk X600 Sd9sb8w-2t00 Firmware	<x6112100
Westerndigital Sandisk X600 Sd9sb8w-2t00
Westerndigital Sandisk X600 Sd9sn8w-128g Firmware	<x6112100
Westerndigital Sandisk X600 Sd9sn8w-128g
Westerndigital Sandisk X600 Sd9sn8w-256g Firmware	<x6112100
Westerndigital Sandisk X600 Sd9sn8w-256g
Westerndigital Sandisk X600 Sd9sn8w-512g Firmware	<x6112100
Westerndigital Sandisk X600 Sd9sn8w-512g
Westerndigital Sandisk X600 Sd9sn8w-1t00 Firmware	<x6112100
Westerndigital Sandisk X600 Sd9sn8w-1t00
Westerndigital Sandisk X600 Sd9sn8w-2t00 Firmware	<x6112100
Westerndigital Sandisk X600 Sd9sn8w-2t00
Westerndigital Sandisk X300s Sd7sb3q-064g Firmware
Westerndigital Sandisk X300s Sd7sb3q-064g
Westerndigital Sandisk X300s Sd7sn3q-064g Firmware
Westerndigital Sandisk X300s Sd7sn3q-064g
Westerndigital Sandisk X300s Sd7ub2q-010t Firmware
Westerndigital Sandisk X300s Sd7ub2q-010t
Westerndigital Sandisk X300s Sd7ub2q-512g Firmware
Westerndigital Sandisk X300s Sd7ub2q-512g
Westerndigital Sandisk X300s Sd7ub3q-128g Firmware
Westerndigital Sandisk X300s Sd7ub3q-128g
Westerndigital Sandisk X300s Sd7ub3q-256g Firmware
Westerndigital Sandisk X300s Sd7ub3q-256g
Westerndigital Sandisk X300s Sd7un3q-128g Firmware
Westerndigital Sandisk X300s Sd7un3q-128g
Westerndigital Sandisk X300s Sd7un3q-256g Firmware
Westerndigital Sandisk X300s Sd7un3q-256g
Westerndigital Sandisk X300s Sd7un3q-512g Firmware
Westerndigital Sandisk X300s Sd7un3q-512g
Westerndigital Sandisk X400 Sd8sb8u-128g Firmware
Westerndigital Sandisk X400 Sd8sb8u-128g
Westerndigital Sandisk X400 Sd8sb8u-128g-1122 Firmware
Westerndigital Sandisk X400 Sd8sb8u-128g-1122
Westerndigital Sandisk X400 Sd8sb8u-1t00 Firmware
Westerndigital Sandisk X400 Sd8sb8u-1t00
Westerndigital Sandisk X400 Sd8sb8u-1t00-1122 Firmware
Westerndigital Sandisk X400 Sd8sb8u-1t00-1122
Westerndigital Sandisk X400 Sd8sb8u-256g Firmware
Westerndigital Sandisk X400 Sd8sb8u-256g
Westerndigital Sandisk X400 Sd8sb8u-256g-1122 Firmware
Westerndigital Sandisk X400 Sd8sb8u-256g-1122
Westerndigital Sandisk X400 Sd8sb8u-512g Firmware
Westerndigital Sandisk X400 Sd8sb8u-512g
Westerndigital Sandisk X400 Sd8sb8u-512g-1122 Firmware
Westerndigital Sandisk X400 Sd8sb8u-512g-1122
Westerndigital Sandisk X400 Sd8sn8u-128g Firmware
Westerndigital Sandisk X400 Sd8sn8u-128g
Westerndigital Sandisk X400 Sd8sn8u-128g-1122 Firmware
Westerndigital Sandisk X400 Sd8sn8u-128g-1122
Westerndigital Sandisk X400 Sd8sn8u-1t00 Firmware
Westerndigital Sandisk X400 Sd8sn8u-1t00
Westerndigital Sandisk X400 Sd8sn8u-1t00-1122 Firmware
Westerndigital Sandisk X400 Sd8sn8u-1t00-1122
Westerndigital Sandisk X400 Sd8sn8u-256g Firmware
Westerndigital Sandisk X400 Sd8sn8u-256g
Westerndigital Sandisk X400 Sd8sn8u-256g-1122 Firmware
Westerndigital Sandisk X400 Sd8sn8u-256g-1122
Westerndigital Sandisk X400 Sd8sn8u-512g Firmware
Westerndigital Sandisk X400 Sd8sn8u-512g
Westerndigital Sandisk X400 Sd8sn8u-512g-1122 Firmware
Westerndigital Sandisk X400 Sd8sn8u-512g-1122
Westerndigital Sandisk X400 Sd8tb8u-128g-1122 Firmware
Westerndigital Sandisk X400 Sd8tb8u-128g-1122
Westerndigital Sandisk X400 Sd8tb8u-1t00-1122 Firmware
Westerndigital Sandisk X400 Sd8tb8u-1t00-1122
Westerndigital Sandisk X400 Sd8tb8u-256g-1122 Firmware
Westerndigital Sandisk X400 Sd8tb8u-256g-1122
Westerndigital Sandisk X400 Sd8tb8u-512g-1122 Firmware
Westerndigital Sandisk X400 Sd8tb8u-512g-1122
Westerndigital Sandisk X300 Sd7sb6s-128g Firmware
Westerndigital Sandisk X300 Sd7sb6s-128g
Westerndigital Sandisk X300 Sd7sb6s-256g Firmware
Westerndigital Sandisk X300 Sd7sb6s-256g
Westerndigital Sandisk X300 Sd7sb7s-010t Firmware
Westerndigital Sandisk X300 Sd7sb7s-010t
Westerndigital Sandisk X300 Sd7sb7s-512g Firmware
Westerndigital Sandisk X300 Sd7sb7s-512g
Westerndigital Sandisk X300 Sd7sf6s-128g Firmware
Westerndigital Sandisk X300 Sd7sf6s-128g
Westerndigital Sandisk X300 Sd7sf6s-256g Firmware
Westerndigital Sandisk X300 Sd7sf6s-256g
Westerndigital Sandisk X300 Sd7sf6s-512g Firmware
Westerndigital Sandisk X300 Sd7sf6s-512g
Westerndigital Sandisk X300 Sd7sn6s-128g Firmware
Westerndigital Sandisk X300 Sd7sn6s-128g
Westerndigital Sandisk X300 Sd7sn6s-256g Firmware
Westerndigital Sandisk X300 Sd7sn6s-256g
Westerndigital Sandisk X300 Sd7sn6s-512g Firmware
Westerndigital Sandisk X300 Sd7sn6s-512g

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2019-11686?
CVE-2019-11686 has a medium severity level as it allows cryptographically sensitive data to remain on the drive after intended erasure.
How do I fix CVE-2019-11686?
To mitigate CVE-2019-11686, users should update to the firmware version x6112100 or later for affected Western Digital SSDs.
Which devices are affected by CVE-2019-11686?
CVE-2019-11686 affects Western Digital SanDisk X300, X300s, X400, and X600 devices.
What type of vulnerability is CVE-2019-11686?
CVE-2019-11686 is a vulnerability in the wear-leveling algorithm of certain SSDs, affecting the erasure of cryptographic keys.
Is data at risk due to CVE-2019-11686?
Yes, data encryption keys and other sensitive parameters may still be recoverable from the drive, posing a security risk.

CVE-2019-11686

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2019-11686?

How do I fix CVE-2019-11686?

Which devices are affected by CVE-2019-11686?

What type of vulnerability is CVE-2019-11686?

Is data at risk due to CVE-2019-11686?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2019-11686?

How do I fix CVE-2019-11686?

Which devices are affected by CVE-2019-11686?

What type of vulnerability is CVE-2019-11686?

Is data at risk due to CVE-2019-11686?