Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2020-13799 | First vendor Publication | 2020-11-18 |
| Vendor | Cve | Last vendor Modification | 2021-06-29 |
Security-Database Scoring CVSS v3
| Cvss vector : CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | |||
|---|---|---|---|
| Overall CVSS Score | 6.8 | ||
| Base Score | 6.8 | Environmental Score | 6.8 |
| impact SubScore | 5.9 | Temporal Score | 6.8 |
| Exploitabality Sub Score | 0.9 | ||
| Attack Vector | Physical | Attack Complexity | Low |
| Privileges Required | None | User Interaction | None |
| Scope | Unchanged | Confidentiality Impact | High |
| Integrity Impact | High | Availability Impact | High |
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 4.6 | Attack Range | Local |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Western Digital has identified a security vulnerability in the Replay Protected Memory Block (RPMB) protocol as specified in multiple standards for storage device interfaces, including all versions of eMMC, UFS, and NVMe. The RPMB protocol is specified by industry standards bodies and is implemented by storage devices from multiple vendors to assist host systems in securing trusted firmware. Several scenarios have been identified in which the RPMB state may be affected by an attacker without the knowledge of the trusted component that uses the RPMB feature. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13799 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-294 | Authentication Bypass by Capture-replay |
Sources (Detail)
| Source | Url |
|---|---|
| CONFIRM | https://www.westerndigital.com/support/productsecurity/wdc-20008-replay-attac... |
| MISC | https://www.kb.cert.org/vuls/id/231329 |
Alert History
| Date | Informations |
|---|---|
| 2021-06-29 21:23:20 |
|
| 2020-12-03 21:23:21 |
|
| 2020-12-01 17:22:54 |
|
| 2020-11-19 17:22:49 |
|
| 2020-11-19 05:22:49 |
|
