Rotem Sela

**Name of the Vulnerable Software and Affected Versions** Western Digital UFS Host Boot ROM (affected versions not specified) **Description** A weakness has been identified in the UFS standard that could result in a security issue. This issue may exist in systems where the Host boot ROM code implements the UFS Boot feature to boot from UFS compliant storage devices. The UFS Boot feature is provided by UFS devices to support platforms that need to download the system boot loader from external non-volatile storage locations. Adversaries may disable the boot capability or revert to an old boot loader code if the host boot ROM code is improperly implemented. UFS Host Boot ROM implementers may be impacted by this issue. UFS devices are only impacted when connected to a vulnerable UFS Host and are not independently impacted by this issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** NVIDIA SHIELD TV versions prior to 8.2.2 **Description** The issue is related to the implementation of the RPMB command status, allowing an attacker to write to the Write Protect Configuration Block. This may lead to denial of service or escalation of privileges. **Recommendations** For versions prior to 8.2.2, update to version 8.2.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the RPMB command status to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Western Digital iNAND devices through 2020-06-03 **Description** A security issue has been identified in the Replay Protected Memory Block (RPMB) protocol, which is used by storage devices to secure trusted firmware. This issue can be exploited in several scenarios, potentially allowing an attacker to affect the RPMB state without the knowledge of the trusted component. The issue can lead to authentication bypass via a capture-replay attack. **Recommendations** For Western Digital iNAND devices through 2020-06-03, as a temporary workaround, consider restricting access to the RPMB feature until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.