Self-Encrypting Drive Vulnerability in Lenovo and Dell Laptops

CVE-2015-7267

Summary

Certain Samsung and Seagate storage devices, when used in sleep mode on specific Lenovo and Dell laptops, exhibit a vulnerability that allows attackers to bypass crucial self-encrypting drive (SED) protections. This vulnerability arises from the inability to detect when the SATA drives are unplugged while in sleep mode. As a result, physically proximate attackers can exploit this weakness to gain unauthorized access to sensitive data stored on these drives. It's essential for users and organizations relying on these laptops to be aware of the risk and implement additional security measures.

References