Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2010-0225

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SanDisk SanDisk Cruzer Enterprise是美国SanDisk公司的一种加密的 USB 闪存驱动器。这种安全的 USB 驱动器对所有文件实施强制访问控制，将它们存储在硬件加密、受密码保护的分区中。 SanDisk Cruzer Enterprise 存在加密问题漏洞，该漏洞源于SanDisk Cruzer Enterprise USB flash驱动使用一个固定的256比特的密匙来获得对明文驱动内容的访问权限，这使得攻击者更易于通过决定和提供该密匙，来读取或修改数据。

AI Predicted 7.5 Difficulty: Easy EPSS 0.28% · P21
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2010-0225

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
SanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
SanDisk Cruzer Enterprise 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SanDisk SanDisk Cruzer Enterprise是美国SanDisk公司的一种加密的 USB 闪存驱动器。这种安全的 USB 驱动器对所有文件实施强制访问控制，将它们存储在硬件加密、受密码保护的分区中。 SanDisk Cruzer Enterprise 存在加密问题漏洞，该漏洞源于SanDisk Cruzer Enterprise USB flash驱动使用一个固定的256比特的密匙来获得对明文驱动内容的访问权限，这使得攻击者更易于通过决定和提供该密匙，来读取或修改数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2010-0225

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2010-0225

请登录查看更多情报信息。

Vendor Advisories for CVE-2010-0225 (2)

Other References for CVE-2010-0225 (7)

Same Patch Batch · n/a · 2010-01-07 · 20 CVEs total

CVE-2010-0228 Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash驱动256比特的密匙访问权限漏洞
CVE-2009-4593 Bftpd 'bftpdutmp.c ' 未明远程拒绝服务漏洞
CVE-2009-4592 Secureideas Basic Analysis and Security Engine 'base_local_rules.php'未明漏洞
CVE-2009-4591 Secureideas Basic Analysis and Security Engine SQL注入漏洞
CVE-2009-4590 Secureideas Basic Analysis and Security Engine 'base_local_rules.php'跨站脚本攻击漏洞
CVE-2009-4589 MediaWiki 'SpecialBlockip.php' 跨站脚本攻击漏洞
CVE-2009-4588 AwingSoft Awakening Web3D Player和Winds3D Viewer ActiveX 控件缓冲区溢出漏洞
CVE-2009-4587 Cherokee Web Server GET request拒绝服务漏洞
CVE-2009-4586 Wowd client 'index.html'多个跨站脚本攻击漏洞
CVE-2010-0229 Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash驱动
CVE-2009-3742 Liferay Portal Plugins Configuration p_p_id参数跨站脚本漏洞
CVE-2010-0227 Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash驱动密码验证漏洞
CVE-2010-0226 SanDisk Cruzer Enterprise USB flash驱动密匙明文驱动漏洞
CVE-2010-0224 SanDisk Cruzer Enterprise USB flash验证密码驱动漏洞
CVE-2010-0223 Kingston DataTraveler USB flash驱动密匙访问驱动漏洞
CVE-2010-0222 Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP)和DataTrav
CVE-2010-0221 Kingston DataTraveler BlackBox、DataTraveler Secure Privacy Edition、DataTraveler Elite Priv
CVE-2010-0220 Mozilla Firefox 'nsObserverList.cpp'拒绝服务攻击漏洞
CVE-2009-4497 LXR Cross Referencer 多个跨站脚本攻击漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2010-0225

No comments yet

Leave a comment