CVE-2018-12037

Published: Nov 20, 2018 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2018-4020 Aliases: GSD-2018-12037
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 4,0
Source: [email protected]
Attack Vector: physical
Attack Complexity: high
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: none
Availability: none
LOW 1,9
Source: [email protected]
Access Vector: local
Access Complexity: medium
Authentication: none
Confidentiality: partial
Integrity: none
Availability: none

Description

AI Translation Available

An issue was discovered on Samsung 840 EVO and 850 EVO devices (only in 'ATA high' mode, not vulnerable in 'TCG' or 'ATA max' mode), Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of a cryptographic link between the password and the Disk Encryption Key allows attackers with privileged access to SSD firmware full access to encrypted data.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0015
Percentile
0,4th
Updated

EPSS Score Trend (Last 91 Days)

Operating System

T3 Firmware by Samsung

Product Information
Vendor Samsung
Product T3 Firmware
Version -
cpe:2.3:o:samsung:t3_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

840 Evo Firmware by Samsung

Product Information
Vendor Samsung
Product 840 Evo Firmware
Version -
cpe:2.3:o:samsung:840_evo_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

850 Evo Firmware by Samsung

Product Information
Vendor Samsung
Product 850 Evo Firmware
Version -
cpe:2.3:o:samsung:850_evo_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Crucial Mx200 Firmware by Micron

Product Information
Vendor Micron
Product Crucial Mx200 Firmware
Version -
cpe:2.3:o:micron:crucial_mx200_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

T5 Firmware by Samsung

Product Information
Vendor Samsung
Product T5 Firmware
Version -
cpe:2.3:o:samsung:t5_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Crucial Mx300 Firmware by Micron

Product Information
Vendor Micron
Product Crucial Mx300 Firmware
Version -
cpe:2.3:o:micron:crucial_mx300_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Crucial Mx100 Firmware by Micron

Product Information
Vendor Micron
Product Crucial Mx100 Firmware
Version -
cpe:2.3:o:micron:crucial_mx100_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://portal.msrc.microsoft.com/en-US/security-guidance/a…
Patch Third Party Advisory Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180028
https://security.netapp.com/advisory/ntap-20181112-0001/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20181112-0001/
http://www.securityfocus.com/bid/105840
Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/105840
https://portal.msrc.microsoft.com/en-US/security-guidance/a…
Patch Third Party Advisory Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180028
https://security.netapp.com/advisory/ntap-20181112-0001/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20181112-0001/
http://www.securityfocus.com/bid/105840
Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/105840