Approved changes feed: RSS · Atom

cpe:2.3:o:westerndigital:sandisk_x300_sd7sb6s-128g_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorWesterndigital (31f3ce61-d65f-59c0-8a6e-4a83464a1be1)
ProductSandisk X300 Sd7Sb6S 128G Firmware (9df3c9e4-d79e-59a0-8150-af46e4cd5f0b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11686 vulnerable 2026-06-03 14:39:33.743182 Details available
Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters (such as data encryption keys) to remain on the drive media after their intended erasure.
Published: 2020-03-10T12:35:45.000Z
Updated: 2024-08-04T23:03:32.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10706 vulnerable 2026-06-03 14:39:24.123104 Details available
Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device, and if extracted could be used to install arbitrary firmware to other devices.
Published: 2020-03-10T12:45:10.000Z
Updated: 2024-08-04T22:32:01.181Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.