CVE Daily

CVE-2015-7269

Seagate ST500LT015 hard disk drives, when operating in eDrive mode on Lenovo Thi...

Medium CVSS 4.2

Overview

Seagate ST500LT015 hard disk drives, when operating in eDrive mode on Lenovo ThinkPad W541 laptops with BIOS 2.21, allow physically proximate attackers to bypass self-encrypting drive (SED) protection by attaching a second SATA connector to exposed pins, maintaining an alternate power source, and attaching the data cable to another machine, aka a "Hot Unplug Attack."

CWE: CWE-254 Published: 2017-11-27T22:29:00.333
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.2 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags