NetSight
IP …
medium5.5

CVE-2019-11686

Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive …

Impact

Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters (such as data encryption keys) to remain on the drive media after their intended erasure.

Affected products

VendorProductAffected versions
WesterndigitalSandisk X600 Sd9tb8w-128g Firmware
before x6112100
WesterndigitalSandisk X600 Sd9tb8w-256g Firmware
before x6112100
WesterndigitalSandisk X600 Sd9tb8w-512g Firmware
before x6112100
WesterndigitalSandisk X600 Sd9tb8w-1t00 Firmware
before x6112100
WesterndigitalSandisk X600 Sd9tb8w-2t00 Firmware
before x6112100
WesterndigitalSandisk X600 Sd9tn8w-128g Firmware
before x6112100
WesterndigitalSandisk X600 Sd9tn8w-256g Firmware
before x6112100
WesterndigitalSandisk X600 Sd9tn8w-512g Firmware
before x6112100
WesterndigitalSandisk X600 Sd9tn8w-1t00 Firmware
before x6112100
WesterndigitalSandisk X600 Sd9tn8w-2t00 Firmware
before x6112100
WesterndigitalSandisk X600 Sd9sb8w-128g Firmware
before x6112100
WesterndigitalSandisk X600 Sd9sb8w-256g Firmware
before x6112100

Weakness classification

CWE-522

References