QwikSec

Security Database

CVE

CWE

Training

CVE-2010-0223

Published: Jan 7, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.kingston.com/driveupdate/

x_refsource_MISC

http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9

x_refsource_MISC

http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf

x_refsource_MISC

vdb-entry

x_refsource_VUPEN

https://www.ironkey.com/usb-flash-drive-flaw-exposed

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.