CVE-2019-10705

Published: Mar 10, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials.

Affected (20)

Products: Westerndigital: Sandisk X600 Sd9tb8w 128g Firmware, Sandisk X600 Sd9tb8w 256g Firmware, Sandisk X600 Sd9tb8w 512g Firmware, Sandisk X600 Sd9tb8w 1t00 Firmware, Sandisk X600 Sd9tb8w 2t00 Firmware, Sandisk X600 Sd9tn8w 128g Firmware, Sandisk X600 Sd9tn8w 256g Firmware, Sandisk X600 Sd9tn8w 512g Firmware, Sandisk X600 Sd9tn8w 1t00 Firmware, Sandisk X600 Sd9tn8w 2t00 Firmware, Sandisk X600 Sd9sb8w 128g Firmware, Sandisk X600 Sd9sb8w 256g Firmware, Sandisk X600 Sd9sb8w 512g Firmware, Sandisk X600 Sd9sb8w 1t00 Firmware, Sandisk X600 Sd9sb8w 2t00 Firmware, Sandisk X600 Sd9sn8w 128g Firmware, Sandisk X600 Sd9sn8w 256g Firmware, Sandisk X600 Sd9sn8w 512g Firmware, Sandisk X600 Sd9sn8w 1t00 Firmware, Sandisk X600 Sd9sn8w 2t00 Firmware

Westerndigital

20 products

Sandisk X600 Sd9tb8w 128g Firmware

Sandisk X600 Sd9tb8w 256g Firmware

Sandisk X600 Sd9tb8w 512g Firmware

Sandisk X600 Sd9tb8w 1t00 Firmware

Sandisk X600 Sd9tb8w 2t00 Firmware

Sandisk X600 Sd9tn8w 128g Firmware

Sandisk X600 Sd9tn8w 256g Firmware

Sandisk X600 Sd9tn8w 512g Firmware

Sandisk X600 Sd9tn8w 1t00 Firmware

Sandisk X600 Sd9tn8w 2t00 Firmware

Sandisk X600 Sd9sb8w 128g Firmware

Sandisk X600 Sd9sb8w 256g Firmware

Sandisk X600 Sd9sb8w 512g Firmware

Sandisk X600 Sd9sb8w 1t00 Firmware

Sandisk X600 Sd9sb8w 2t00 Firmware

Sandisk X600 Sd9sn8w 128g Firmware

Sandisk X600 Sd9sn8w 256g Firmware

Sandisk X600 Sd9sn8w 512g Firmware

Sandisk X600 Sd9sn8w 1t00 Firmware

Sandisk X600 Sd9sn8w 2t00 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tb8w 128g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tb8w 128g	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tb8w 256g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tb8w 256g	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tb8w 512g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tb8w 512g	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tb8w 1t00 Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tb8w 1t00	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tb8w 2t00 Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tb8w 2t00	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tn8w 128g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tn8w 128g	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tn8w 256g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tn8w 256g	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tn8w 512g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tn8w 512g	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tn8w 1t00 Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tn8w 1t00	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tn8w 2t00 Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tn8w 2t00	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sb8w 128g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sb8w 128g	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sb8w 256g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sb8w 256g	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sb8w 512g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sb8w 512g	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sb8w 1t00 Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sb8w 1t00	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sb8w 2t00 Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sb8w 2t00	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sn8w 128g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sn8w 128g	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sn8w 256g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sn8w 256g	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sn8w 512g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sn8w 512g	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sn8w 1t00 Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sn8w 1t00	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sn8w 2t00 Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sn8w 2t00	All versions

Related CWEs

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (6)

https://support.wdc.com/cat_products.aspx?ID=6&lang=en

Source: cve@mitre.org

ProductVendor Advisory

https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd

Source: cve@mitre.org

Vendor Advisory

https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-ssd

Source: cve@mitre.org

Not Applicable

https://support.wdc.com/cat_products.aspx?ID=6&lang=en

Source: af854a3a-2127-422b-91ae-364da2661108

ProductVendor Advisory

https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-ssd

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

Timeline

No history available yet.