CVEvulnerability
CVE-2010-0223
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2010-01-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time.
Affected configurations
• kingston datatraveler blackbox
• kingston datatraveler elite
• kingston datatraveler secure
Related
Weakness · not in database (1)
References
- http://www.kingston.com/driveupdate/ Vendor Advisory
- http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf www.syss.de
- http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9 www.syss.de
- http://www.vupen.com/english/advisories/2010/0080 www.vupen.com
- https://www.ironkey.com/usb-flash-drive-flaw-exposed www.ironkey.com
- http://www.kingston.com/driveupdate/ Vendor Advisory
- http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf www.syss.de
- http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9 www.syss.de
- http://www.vupen.com/english/advisories/2010/0080 www.vupen.com
- https://www.ironkey.com/usb-flash-drive-flaw-exposed www.ironkey.com