← back
CVE-2021-36750

CVE-2021-36750

EPSS 13.5%
ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users (across USB drives sold under multiple brand names).
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://encsecurity.zendesk.com/hc/en-us/articles/4413283717265-Update-for-ENC-Softwarehttps://pretalx.c3voc.de/rc3-2021-r3s/talk/QMYGR3/https://www.encsecurity.com/solutions.phphttps://www.westerndigital.com/en-ap/support/product-security/wdc-21014-sandisk-secureaccess-software-update