The iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store keys insecurely. They choose a non-preferred storage mechanism if the device has Secure Enclave support but lacks biometric authentication hardware.
References
Link | Resource |
---|---|
https://www.westerndigital.com/support/productsecurity/wdc-21003-armorLock-insecure-key-storage-vulnerability | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
27 Aug 2021, 14:55
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:westerndigital:armorlock:*:*:*:*:*:macos:*:* |
Information
Published : 2021-03-19 00:15
Updated : 2024-02-04 21:23
NVD link : CVE-2021-28653
Mitre link : CVE-2021-28653
CVE.ORG link : CVE-2021-28653
JSON object : View
Products Affected
westerndigital
- armorlock
CWE
CWE-922
Insecure Storage of Sensitive Information