high8.1
CVE-2021-36750
ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users (across US…
Impact
ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users (across USB drives sold under multiple brand names).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zendesk | Enc Datavault | before 7.2 |
| Zendesk | Enc Vaultapi | before 67.0 |
| Sandisk | Secureaccess | Version 3.02 |
Weakness classification
References
- NVD record
- CVE.org record
- https://encsecurity.zendesk.com/hc/en-us/articles/4413283717265-Update-for-ENC-Software
- https://pretalx.c3voc.de/rc3-2021-r3s/talk/QMYGR3/
- https://www.encsecurity.com/solutions.php
- https://www.westerndigital.com/en-ap/support/product-security/wdc-21014-sandisk-secureaccess-software-update
- https://encsecurity.zendesk.com/hc/en-us/articles/4413283717265-Update-for-ENC-Software
- https://pretalx.c3voc.de/rc3-2021-r3s/talk/QMYGR3/
- https://www.encsecurity.com/solutions.php
- https://www.westerndigital.com/en-ap/support/product-security/wdc-21014-sandisk-secureaccess-software-update