CVE-2018-12037 | BDVDB-2026-109644 Detail

Description#

An issue was discovered on Samsung 840 EVO and 850 EVO devices (only in "ATA high" mode, not vulnerable in "TCG" or "ATA max" mode), Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of a cryptographic link between the password and the Disk Encryption Key allows attackers with privileged access to SSD firmware full access to encrypted data.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://security.netapp.com/advisory/ntap-20181112-0001/
http://www.securityfocus.com/bid/105840
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180028

Exploit#

No public exploit known

History#

Version 12018-11-20Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.