PT-2020-13685 · Western Digital · Western Digital Inand

Brian Mastenbrook + 1 · Published 2020-11-18 · Updated 2026-06-05 · CVE-2020-13799

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Western Digital iNAND devices through 2020-06-03

Description A security issue has been identified in the Replay Protected Memory Block (RPMB) protocol, which is used by storage devices to secure trusted firmware. This issue can be exploited in several scenarios, potentially allowing an attacker to affect the RPMB state without the knowledge of the trusted component. The issue can lead to authentication bypass via a capture-replay attack.

Recommendations For Western Digital iNAND devices through 2020-06-03, as a temporary workaround, consider restricting access to the RPMB feature until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2020-13799

Affected Products

Western Digital Inand

References · 10

• https://westerndigital.com/support/productsecurity/wdc-20008-replay-attack-vulnerabilities-rpmb-protocol-applications · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13799 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13799 · Vendor Advisory
• https://kb.cert.org/vuls/id/231329 · Note
• https://t.me/cibsecurity/16567 · Telegram Post
• https://t.me/cvenotify/7315 · Telegram Post
• https://t.me/cvenotify/7385 · Telegram Post
• https://t.me/cibsecurity/17401 · Telegram Post
• https://t.me/cveNotify/166288 · Telegram Post
• https://t.me/cvenotify/5808 · Telegram Post