PT-2010-2022 · Kingston · Kingston Datatraveler Blackbox+2
Published
2010-01-07
·
Updated
2018-08-13
·
CVE-2010-0221
CVSS v2.0
2.1
Low
| Vector | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Kingston DataTraveler BlackBox (DTBB)
Kingston DataTraveler Secure Privacy Edition (DTSP)
Kingston DataTraveler Elite Privacy Edition (DTEP)
Description
The issue allows physically proximate attackers to access the cleartext drive contents via a modified program, as the password validation is performed by a program running on the host computer rather than the device hardware.
Recommendations
For Kingston DataTraveler BlackBox (DTBB), consider using alternative secure storage methods until a fix is available.
For Kingston DataTraveler Secure Privacy Edition (DTSP), restrict access to sensitive data stored on the device to minimize the risk of exploitation.
For Kingston DataTraveler Elite Privacy Edition (DTEP), avoid using the device for storing highly sensitive information until the issue is resolved.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kingston Datatraveler Blackbox
Kingston Datatraveler Elite Privacy Edition
Kingston Datatraveler Secure Privacy Edition