CVE-2022-28384

Published: Jun 8, 2022Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to an insecure design, they allow an offline brute-force attack for determining the correct passcode, and thus gaining unauthorized access to the stored encrypted data. This affects Keypad Secure USB 3.2 Gen 1 Drive Part Number #49428 and Store 'n' Go Secure Portable HDD GD25LK01-3637-C VER4.0.

Affected (2)

Products: Verbatim: Keypad Secure Usb 3.2 Gen 1 Firmware, Store 'n' Go Secure Portable Hdd Firmware

2 products

Keypad Secure Usb 3.2 Gen 1 Firmware

Store 'n' Go Secure Portable Hdd Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Verbatim Keypad Secure Usb 3.2 Gen 1 Firmware	Up to 2022-03-31

Running on/with	Platform Versions
Verbatim Keypad Secure Usb 3.2 Gen 1	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Verbatim Store 'n' Go Secure Portable Hdd Firmware	Up to 2022-03-31

Running on/with	Platform Versions
Verbatim Store 'n' Go Secure Portable Hdd	All versions

Related CWEs

Improper Restriction of Excessive Authentication Attempts

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

References (16)

http://packetstormsecurity.com/files/167481/Verbatim-Keypad-Secure-USB-3.2-Gen-1-Drive-Cryptography-Issue.html

Source: cve@mitre.org

ExploitMailing ListThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/167499/Verbatim-Store-N-Go-Secure-Portable-HDD-GD25LK01-3637-C-VER4.0-Risky-Crypto.html

Source: cve@mitre.org

ExploitMailing ListThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2022/Jun/17

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Jun/8

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Oct/3

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-001.txt

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-005.txt

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-043.txt

Source: cve@mitre.org

ExploitThird Party Advisory

http://packetstormsecurity.com/files/167481/Verbatim-Keypad-Secure-USB-3.2-Gen-1-Drive-Cryptography-Issue.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/167499/Verbatim-Store-N-Go-Secure-Portable-HDD-GD25LK01-3637-C-VER4.0-Risky-Crypto.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2022/Jun/17

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Jun/8

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Oct/3

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-001.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-005.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-043.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.