PT-2010-2023 · Kingston · Kingston Datatraveler Blackbox+2
Published
2010-01-07
·
Updated
2018-08-13
·
CVE-2010-0222
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Kingston DataTraveler BlackBox (DTBB)
Kingston DataTraveler Secure Privacy Edition (DTSP)
Kingston DataTraveler Elite Privacy Edition (DTEP)
Description
The issue allows physically proximate attackers to read or modify data on the USB flash drives by determining and providing a fixed 256-bit key used for obtaining access to the cleartext drive contents.
Recommendations
For Kingston DataTraveler BlackBox (DTBB), consider using alternative secure storage methods until a fix is available.
For Kingston DataTraveler Secure Privacy Edition (DTSP), restrict access to sensitive data stored on the device to minimize the risk of exploitation.
For Kingston DataTraveler Elite Privacy Edition (DTEP), avoid storing sensitive information on the device until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kingston Datatraveler Blackbox
Kingston Datatraveler Elite Privacy Edition
Kingston Datatraveler Secure Privacy Edition