CVE-2018-12037

MEDIUM Year: 2018
CVSS v3 Score
4.0
Medium
CVSS v2 Score
1.9
Low
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

An issue was discovered on Samsung 840 EVO and 850 EVO devices (only in "ATA high" mode, not vulnerable in "TCG" or "ATA max" mode), Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of a cryptographic link between the password and the Disk Encryption Key allows attackers with privileged access to SSD firmware full access to encrypted data.

Related Vulnerabilities

CVE-2014-3477

MEDIUM
CVSS:4.0(Medium)

The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an AccessDenied error to the service instead of a client when the client is prohibited from accessing t...

NVD-CWE-Other2014

CVE-2015-7403

MEDIUM
CVSS:4.0(Medium)

IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System (GPFS) 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to cause a denial of service (incorrect point...

NVD-CWE-Other2015

CVE-2017-10033

MEDIUM
CVSS:4.0(Medium)

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Support Tools). Supported versions that are affected are 11.1.1.8.0 and 12.2.1.2.0. Difficult to exploi...

NVD-CWE-Other2017

CVE-2017-10213

MEDIUM
CVSS:4.0(Medium)

Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allo...

NVD-CWE-Other2017

CVE-2017-10220

MEDIUM
CVSS:4.0(Medium)

Vulnerability in the Hospitality Property Interfaces component of Oracle Hospitality Applications (subcomponent: Parser). The supported version that is affected is 8.10.x. Easily exploitable vulnerabi...

NVD-CWE-Other2017

CVE-2017-10295

MEDIUM
CVSS:4.0(Medium)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Emb...

NVD-CWE-Other2017