4.2 - CVE-2015-7269

Executive Summary

Informations
Name	CVE-2015-7269	First vendor Publication	2017-11-27
Vendor	Cve	Last vendor Modification	2017-12-20

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Overall CVSS Score	4.2
Base Score	4.2	Environmental Score	4.2
impact SubScore	3.6	Temporal Score	4.2
Exploitabality Sub Score	0.5

Attack Vector	Physical	Attack Complexity	High
Privileges Required	None	User Interaction	None
Scope	Unchanged	Confidentiality Impact	High
Integrity Impact	None	Availability Impact	None
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:M/Au:N/C:P/I:N/A:N)
Cvss Base Score	1.9	Attack Range	Local
Cvss Impact Score	2.9	Attack Complexity	Medium
Cvss Expoit Score	3.4	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Seagate ST500LT015 hard disk drives, when operating in eDrive mode on Lenovo ThinkPad W541 laptops with BIOS 2.21, allow physically proximate attackers to bypass self-encrypting drive (SED) protection by attaching a second SATA connector to exposed pins, maintaining an alternate power source, and attaching the data cable to another machine, aka a "Hot Unplug Attack."

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7269

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-254	Security Features

CPE : Common Platform Enumeration

Type	Description	Count
Os	Seagate St500Lt015 Firmware cpe:2.3:o:seagate:st500lt015_firmware:-:::::::*	1

Sources (Detail)

Source	Url
MISC	https://www.blackhat.com/docs/eu-15/materials/eu-15-Boteanu-Bypassing-Self-En... https://www.infoworld.com/article/3004913/encryption/self-encrypting-drives-a...