PT-2017-7178 · Lenovo+1 · Lenovo Thinkpad W541+1

Publicado 2017-11-27 · Atualizado 2017-12-20 · CVE-2015-7269

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Seagate ST500LT015 hard disk drives versions (affected versions not specified, but operating in eDrive mode on Lenovo ThinkPad W541 laptops with BIOS 2.21)

Description The issue allows physically proximate attackers to bypass self-encrypting drive (SED) protection. This can be achieved by attaching a second SATA connector to exposed pins, maintaining an alternate power source, and attaching the data cable to another machine, also known as a "Hot Unplug Attack."

Recommendations For Seagate ST500LT015 hard disk drives operating in eDrive mode on Lenovo ThinkPad W541 laptops with BIOS 2.21, consider physically securing the device to prevent unauthorized physical access, and ensure that the SATA connector and data cable are not exposed or accessible to unauthorized parties. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

CVE-2015-7269

Produtos afetados

Lenovo Thinkpad W541

Seagate St500Lt015

Referências · 3

• https://blackhat.com/docs/eu-15/materials/eu-15-Boteanu-Bypassing-Self-Encrypting-Drives-SED-In-Enterprise-Environments-wp.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-7269 · Nota de Segurança
• https://infoworld.com/article/3004913/encryption/self-encrypting-drives-are-hardly-any-better-than-software-based-encryption.html · Nota