Overview
- Description
- Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when in sleep mode and operating in Opal or eDrive mode on Lenovo ThinkPad T440s laptops with BIOS 2.32; ThinkPad W541 laptops with BIOS 2.21; Dell Latitude E6410 laptops with BIOS A16; or Latitude E6430 laptops with BIOS A16, allow physically proximate attackers to bypass self-encrypting drive (SED) protection by leveraging failure to detect when SATA drives are unplugged in Sleep Mode, aka a "Hot Plug attack."
- Source
- cret@cert.org
- NVD status
- Analyzed
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 4.2
- Impact score
- 3.6
- Exploitability score
- 0.5
- Vector string
- CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 1.9
- Impact score
- 2.9
- Exploitability score
- 3.4
- Vector string
- AV:L/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-254
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:850_pro_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32302DB9-927F-4232-88DF-11C134266EBB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:850_pro:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "811049BE-1584-4E45-A157-1BEDBB74D6C0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:pm851_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9513E12E-A0EF-4789-8D2D-B97032C5A65C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:pm851:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8040B236-B936-4642-8CF7-237CE39EE7F0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:seagate:st500lt015_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05C36534-C9F5-4FE1-B8C8-5BA6D021C5C7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:seagate:st500lt015:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E60BC85A-FE1F-44EB-A049-6EA987C48AE0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:seagate:st500lt025_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B999BEA-6A98-46B5-832F-76231DAA3BEA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:seagate:st500lt025:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C625B6AD-4665-42EF-91DD-F45180719768"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]