Authentication Bypass in SanDisk Cruzer Enterprise USB Flash Drives
CVE-2010-0224

Currently unrated

Key Information:

Vendor

Sandisk

Status
Cruzer Enterprise Usb
Vendor
CVE Published:
7 January 2010

What is CVE-2010-0224?

SanDisk Cruzer Enterprise USB flash drives are susceptible to an authentication bypass due to password validation being handled by software on the host computer rather than the hardware of the device itself. This flaw enables an attacker within close proximity to manipulate the host software to gain access to the drive's cleartext contents, potentially compromising sensitive data stored on the device.

References

http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5...
x_refsource_MISC
http://securitytracker.com/id?1023408
vdb-entryx_refsource_SECTRACK
http://www.sandisk.com/business-solutions/enterprise/tech...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.