PT-2019-12542 · Eyedisk · Eyedisk

David Lodge · Publicado 2019-05-12 · Atualizado 2020-08-24 · CVE-2019-11885

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions eyeDisk (affected versions not specified)

Description The issue concerns the unlock feature of eyeDisk, which sends the password in cleartext. This allows the password to be discovered by sniffing USB traffic or by sending a specific SCSI command: 06 05 52 41 01 b0 00 00 00 00 00 00.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2019-11885

Produtos afetados

Eyedisk

Referências · 2

• 🔥 https://pentestpartners.com/security-blog/eyedisk-hacking-the-unhackable-again · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-11885 · Nota de Segurança