CVE-2019-10705
Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.29%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 1.29% probability · 70th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-522
- Affected
- westerndigital/sandisk x600 sd9tb8w-128g firmware · westerndigital/sandisk x600 sd9tb8w-256g firmware · westerndigital/sandisk x600 sd9tb8w-512g firmware · westerndigital/sandisk x600 sd9tb8w-1t00 firmware · westerndigital/sandisk x600 sd9tb8w-2t00 firmware · westerndigital/sandisk x600 sd9tn8w-128g firmware · westerndigital/sandisk x600 sd9tn8w-256g firmware · westerndigital/sandisk x600 sd9tn8w-512g firmware · westerndigital/sandisk x600 sd9tn8w-1t00 firmware · westerndigital/sandisk x600 sd9tn8w-2t00 firmware · westerndigital/sandisk x600 sd9sb8w-128g firmware · westerndigital/sandisk x600 sd9sb8w-256g firmware · westerndigital/sandisk x600 sd9sb8w-512g firmware · westerndigital/sandisk x600 sd9sb8w-1t00 firmware · westerndigital/sandisk x600 sd9sb8w-2t00 firmware · westerndigital/sandisk x600 sd9sn8w-128g firmware · westerndigital/sandisk x600 sd9sn8w-256g firmware · westerndigital/sandisk x600 sd9sn8w-512g firmware · westerndigital/sandisk x600 sd9sn8w-1t00 firmware · westerndigital/sandisk x600 sd9sn8w-2t00 firmware
- Source
- cve@mitre.org
EPSS 1.3% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://support.wdc.com/cat_products.aspx?ID=6&lang=enProduct, Vendor Advisory
- https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssdVendor Advisory
- https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-ssdNot Applicable
- https://support.wdc.com/cat_products.aspx?ID=6&lang=enProduct, Vendor Advisory
- https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssdVendor Advisory
- https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-ssdNot Applicable
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.