PT-2010-2022 · Kingston · Kingston Datatraveler Blackbox+2

Publicado

2010-01-07

·

Atualizado

2018-08-13

·

CVE-2010-0221

CVSS v2.0

2.1

Baixa

VetorAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Kingston DataTraveler BlackBox (DTBB) Kingston DataTraveler Secure Privacy Edition (DTSP) Kingston DataTraveler Elite Privacy Edition (DTEP)
Description The issue allows physically proximate attackers to access the cleartext drive contents via a modified program, as the password validation is performed by a program running on the host computer rather than the device hardware.
Recommendations For Kingston DataTraveler BlackBox (DTBB), consider using alternative secure storage methods until a fix is available. For Kingston DataTraveler Secure Privacy Edition (DTSP), restrict access to sensitive data stored on the device to minimize the risk of exploitation. For Kingston DataTraveler Elite Privacy Edition (DTEP), avoid using the device for storing highly sensitive information until the issue is resolved.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-0221

Produtos afetados

Kingston Datatraveler Blackbox
Kingston Datatraveler Elite Privacy Edition
Kingston Datatraveler Secure Privacy Edition