CVE-2020-13799
Western Digital has identified a security vulnerability in the Replay Protected Memory Block (RPMB) protocol as specified in multiple standards for storage device interfaces, including all versions of eMMC, UFS, and NVMe. The RPMB protocol is specified by industry standards bodies and is implemented by storage devices from multiple vendors to assist host systems in securing trusted firmware. Several scenarios have been identified in which the RPMB state may be affected by an attacker without the knowledge of the trusted component that uses the RPMB feature.
-
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
-
18/11/2020
Operating Systems 3
Inand CL EM132 Firmware
by Westerndigital
5 months ago
Inand IX EM132 Firmware
by Westerndigital
5 months ago
Inand IX EM132 XI Firmware
by Westerndigital
5 months ago
Vulnerability Categories 1
Authentication Bypass by Capture-replay
Advisory Links 2
Related CVEs
Security Research Topics
February Trending CVEs: CVE-2021-3156
As stewards of the lush and vast landscape of security vulnerabilities, we felt obliged to share with you the top trending CVEs of the past month (who's excited for winter to be over?! đâď¸đˇ). Brace yourself! Ok, here we go.
February Trending CVEs: CVE-2020-1472
As stewards of the lush and vast landscape of security vulnerabilities, we felt obliged to share with you the top trending CVEs of the past month (who's excited for winter to be over?! đâď¸đˇ). Brace yourself! Ok, here we go.
February Trending CVEs: CVE-2021-24078
As stewards of the lush and vast landscape of security vulnerabilities, we felt obliged to share with you the top trending CVEs of the past month (who's excited for winter to be over?! đâď¸đˇ). Brace yourself! Ok, here we go.
Top Trending CVEs of January 2021
Well, we made it through the first month of 2021! (Hopefully without any scratches or bruises đ ). As stewards of the lush and vast landscape of security vulnerabilities, we felt obliged to share with you the top trending CVEs of the past month. So, without further ado, The Top Trending CVEs of January 2021:
Security Vulnerability Examples
As the threat landscape changes, the ability to address the most common types of security vulnerabilities is vital for robust protection. As information becomes the most essential asset for an organization, cybersecurity gains much more importance. To successfully conduct your business and preserve the hard-earned reputation of your company, you need to protect your data from malicious attacks, data breaches and hackers.
Zoom Security Vulnerabilities
As if times havenât been hard enough, businesses are dealing with new security threats while employees work from home and some have major issues with one of the most popular video conferencing platforms, Zoom.
What is a Vulnerability?
This article will offer a quick guide to vulnerabilities â what they are, how they can be exploited and the consequences of exploitation. A vulnerability is a weakness in an asset that can be exploited by cyber attackers. Itâs a known issue that allows an attack to succeed.
Top 10 Software Vulnerabilities
Security testing is an assessment of the sensitivity of a software vulnerability to various attacks. What type of attacks? Mainly unauthorized breaches into the system with the aim of extracting data about users or getting confidential information. With the help of vulnerabilities present in the software code, attackers can achieve their objectives.
Zero-Day Vulnerability: Defense Strategies
A zero-day is a weakness in hardware, software or firmware that is not known to the parties responsible for patching or fixing the flaw. The term zero refers to an attack that has zero days between the time the vulnerability is discovered and the first attack. Once a zero-day vulnerability is known to the public, itâs known as a one-day or n-day vulnerability.
Start Closing Security Gaps
- Risk reduction from Day 1
- Fast set-up and deployment
- Unified platform
- Full-featured 30-day trial