CVE-2019-11686

Published: Mar 10, 2020Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters (such as data encryption keys) to remain on the drive media after their intended erasure.

Affected (59)

Westerndigital

59 products

Sandisk X600 Sd9tb8w 128g Firmware

Sandisk X600 Sd9tb8w 256g Firmware

Sandisk X600 Sd9tb8w 512g Firmware

Sandisk X600 Sd9tb8w 1t00 Firmware

Sandisk X600 Sd9tb8w 2t00 Firmware

Sandisk X600 Sd9tn8w 128g Firmware

Sandisk X600 Sd9tn8w 256g Firmware

Sandisk X600 Sd9tn8w 512g Firmware

Sandisk X600 Sd9tn8w 1t00 Firmware

Sandisk X600 Sd9tn8w 2t00 Firmware

Sandisk X600 Sd9sb8w 128g Firmware

Sandisk X600 Sd9sb8w 256g Firmware

Sandisk X600 Sd9sb8w 512g Firmware

Sandisk X600 Sd9sb8w 1t00 Firmware

Sandisk X600 Sd9sb8w 2t00 Firmware

Sandisk X600 Sd9sn8w 128g Firmware

Sandisk X600 Sd9sn8w 256g Firmware

Sandisk X600 Sd9sn8w 512g Firmware

Sandisk X600 Sd9sn8w 1t00 Firmware

Sandisk X600 Sd9sn8w 2t00 Firmware

Sandisk X300s Sd7sb3q 064g Firmware

Sandisk X300s Sd7sn3q 064g Firmware

Sandisk X300s Sd7ub2q 010t Firmware

Sandisk X300s Sd7ub2q 512g Firmware

Sandisk X300s Sd7ub3q 128g Firmware

Sandisk X300s Sd7ub3q 256g Firmware

Sandisk X300s Sd7un3q 128g Firmware

Sandisk X300s Sd7un3q 256g Firmware

Sandisk X300s Sd7un3q 512g Firmware

Sandisk X400 Sd8sb8u 128g Firmware

Sandisk X400 Sd8sb8u 128g 1122 Firmware

Sandisk X400 Sd8sb8u 1t00 Firmware

Sandisk X400 Sd8sb8u 1t00 1122 Firmware

Sandisk X400 Sd8sb8u 256g Firmware

Sandisk X400 Sd8sb8u 256g 1122 Firmware

Sandisk X400 Sd8sb8u 512g Firmware

Sandisk X400 Sd8sb8u 512g 1122 Firmware

Sandisk X400 Sd8sn8u 128g Firmware

Sandisk X400 Sd8sn8u 128g 1122 Firmware

Sandisk X400 Sd8sn8u 1t00 Firmware

Sandisk X400 Sd8sn8u 1t00 1122 Firmware

Sandisk X400 Sd8sn8u 256g Firmware

Sandisk X400 Sd8sn8u 256g 1122 Firmware

Sandisk X400 Sd8sn8u 512g Firmware

Sandisk X400 Sd8sn8u 512g 1122 Firmware

Sandisk X400 Sd8tb8u 128g 1122 Firmware

Sandisk X400 Sd8tb8u 1t00 1122 Firmware

Sandisk X400 Sd8tb8u 256g 1122 Firmware

Sandisk X400 Sd8tb8u 512g 1122 Firmware

Sandisk X300 Sd7sb6s 128g Firmware

Sandisk X300 Sd7sb6s 256g Firmware

Sandisk X300 Sd7sb7s 010t Firmware

Sandisk X300 Sd7sb7s 512g Firmware

Sandisk X300 Sd7sf6s 128g Firmware

Sandisk X300 Sd7sf6s 256g Firmware

Sandisk X300 Sd7sf6s 512g Firmware

Sandisk X300 Sd7sn6s 128g Firmware

Sandisk X300 Sd7sn6s 256g Firmware

Sandisk X300 Sd7sn6s 512g Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tb8w 128g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tb8w 128g	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tb8w 256g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tb8w 256g	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tb8w 512g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tb8w 512g	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tb8w 1t00 Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tb8w 1t00	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tb8w 2t00 Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tb8w 2t00	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tn8w 128g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tn8w 128g	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tn8w 256g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tn8w 256g	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tn8w 512g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tn8w 512g	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tn8w 1t00 Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tn8w 1t00	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9tn8w 2t00 Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9tn8w 2t00	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sb8w 128g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sb8w 128g	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sb8w 256g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sb8w 256g	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sb8w 512g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sb8w 512g	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sb8w 1t00 Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sb8w 1t00	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sb8w 2t00 Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sb8w 2t00	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sn8w 128g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sn8w 128g	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sn8w 256g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sn8w 256g	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sn8w 512g Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sn8w 512g	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sn8w 1t00 Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sn8w 1t00	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X600 Sd9sn8w 2t00 Firmware	Before x6112100

Running on/with	Platform Versions
Westerndigital Sandisk X600 Sd9sn8w 2t00	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300s Sd7sb3q 064g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300s Sd7sb3q 064g	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300s Sd7sn3q 064g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300s Sd7sn3q 064g	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300s Sd7ub2q 010t Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300s Sd7ub2q 010t	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300s Sd7ub2q 512g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300s Sd7ub2q 512g	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300s Sd7ub3q 128g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300s Sd7ub3q 128g	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300s Sd7ub3q 256g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300s Sd7ub3q 256g	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300s Sd7un3q 128g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300s Sd7un3q 128g	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300s Sd7un3q 256g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300s Sd7un3q 256g	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300s Sd7un3q 512g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300s Sd7un3q 512g	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8sb8u 128g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8sb8u 128g	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8sb8u 128g 1122 Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8sb8u 128g 1122	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8sb8u 1t00 Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8sb8u 1t00	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8sb8u 1t00 1122 Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8sb8u 1t00 1122	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8sb8u 256g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8sb8u 256g	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8sb8u 256g 1122 Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8sb8u 256g 1122	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8sb8u 512g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8sb8u 512g	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8sb8u 512g 1122 Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8sb8u 512g 1122	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8sn8u 128g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8sn8u 128g	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8sn8u 128g 1122 Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8sn8u 128g 1122	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8sn8u 1t00 Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8sn8u 1t00	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8sn8u 1t00 1122 Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8sn8u 1t00 1122	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8sn8u 256g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8sn8u 256g	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8sn8u 256g 1122 Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8sn8u 256g 1122	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8sn8u 512g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8sn8u 512g	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8sn8u 512g 1122 Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8sn8u 512g 1122	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8tb8u 128g 1122 Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8tb8u 128g 1122	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8tb8u 1t00 1122 Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8tb8u 1t00 1122	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8tb8u 256g 1122 Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8tb8u 256g 1122	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X400 Sd8tb8u 512g 1122 Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X400 Sd8tb8u 512g 1122	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300 Sd7sb6s 128g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300 Sd7sb6s 128g	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300 Sd7sb6s 256g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300 Sd7sb6s 256g	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300 Sd7sb7s 010t Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300 Sd7sb7s 010t	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300 Sd7sb7s 512g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300 Sd7sb7s 512g	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300 Sd7sf6s 128g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300 Sd7sf6s 128g	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300 Sd7sf6s 256g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300 Sd7sf6s 256g	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300 Sd7sf6s 512g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300 Sd7sf6s 512g	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300 Sd7sn6s 128g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300 Sd7sn6s 128g	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300 Sd7sn6s 256g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300 Sd7sn6s 256g	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Westerndigital Sandisk X300 Sd7sn6s 512g Firmware	All versions

Running on/with	Platform Versions
Westerndigital Sandisk X300 Sd7sn6s 512g	All versions

Related CWEs

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (6)

https://support.wdc.com/downloads.aspx?g=907&lang=en

Source: cve@mitre.org

Not Applicable

https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd

Source: cve@mitre.org

Vendor Advisory

https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-s

Source: cve@mitre.org

Broken Link

https://support.wdc.com/downloads.aspx?g=907&lang=en

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-s

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.