Cryptographic Weakness in SanDisk Cruzer Enterprise USB Drives

CVE-2010-0225

What is CVE-2010-0225?

SanDisk Cruzer Enterprise USB drives utilize a fixed 256-bit encryption key, which significantly compromises the security of the drive's data. This design flaw allows attackers in close physical proximity to bypass the drive's encryption and access the sensitive contents stored within. By obtaining this static key, an attacker can read or modify data without authorization, putting user information at great risk. Users of affected devices should take immediate steps to protect their data against potential exploits.

References