CVE-2021-36750 | BDVDB-2026-166374 Detail

Description#

ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users (across USB drives sold under multiple brand names).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.encsecurity.com/solutions.php
https://encsecurity.zendesk.com/hc/en-us/articles/4413283717265-Update-for-ENC-Software
https://www.westerndigital.com/en-ap/support/product-security/wdc-21014-sandisk-secureaccess-software-update
https://pretalx.c3voc.de/rc3-2021-r3s/talk/QMYGR3/

Exploit#

No public exploit known

History#

Version 12021-12-22Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.