Vulnerability in Kingston Datatraveler Blackbox
CVE-2010-0221
Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 2.1 (Low). Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.005 (39.2th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 39th percentile — 39.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
Weakness classification (CWE)
References
- www.kingston.com/driveupdate/ (Exploit)
- www.syss.de/index.php
- securitytracker.com/id (vdb-entry)
- it.slashdot.org/story/10/01/05/1734242/
- news.zdnet.co.uk/security/0,1000000189,39963327,00.htm
- www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardwa…
- blogs.zdnet.com/hardware/
- exchange.xforce.ibmcloud.com/vulnerabilities/55477 (vdb-entry)
- www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_…
- www.vupen.com/english/advisories/2010/0080 (vdb-entry, Vendor Advisory)