Vulnerability in Kingston USB Flash Drives Allows Unauthorized Data Access
CVE-2010-0222

Currently unrated

Key Information:

Vendor

Kingston

Status
Datatraveler Blackbox
Datatraveler Elite
Datatraveler Secure
Vendor
CVE Published:
7 January 2010

What is CVE-2010-0222?

Certain Kingston DataTraveler USB flash drives utilize a fixed 256-bit encryption key for access to the cleartext contents of the drive. This design flaw allows physically nearby attackers to easily determine the key, putting sensitive data at risk of unauthorized access and modification. Affected models include the DataTraveler BlackBox, Secure Privacy Edition, and Elite Privacy Edition. Users of these devices should be aware of the potential risks and consider upgrading to more secure encryption methods.

References

http://www.kingston.com/driveupdate/
x_refsource_MISC
http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5...
x_refsource_MISC
http://it.slashdot.org/story/10/01/05/1734242/
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.