CVE-2007-2023
USB20.dll in Secustick USB flash drive decouples the authorization and file access routines,...
USB20.dll in Secustick USB flash drive decouples the authorization and file access routines, which allows local users to bypass authentication requirements by altering the return value of the VerifyPassWord function.
Exploit likelihood
What each source reports
NVD Score used
USB20.dll in Secustick USB flash drive decouples the authorization and file access routines, which allows local users to bypass authentication requirements by altering the return value of the VerifyPassWord function.
- Record
CVE-2007-2023- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
USB20.dll in Secustick USB flash drive decouples the authorization and file access routines, which allows local users to bypass authentication requirements by altering the return value of the VerifyPassWord function.
- Record
CVE-2007-2023- Updated
- 2026-11-02
EUVDEUVD-2007-2018 No score
USB20.dll in Secustick USB flash drive decouples the authorization and file access routines, which allows local users to bypass authentication requirements by altering the return value of the VerifyPassWord function.
- Record
EUVD-2007-2018- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fm7f-hwmh-f544 No score
USB20.dll in Secustick USB flash drive decouples the authorization and file access routines,...
USB20.dll in Secustick USB flash drive decouples the authorization and file access routines, which allows local users to bypass authentication requirements by altering the return value of the VerifyPassWord function.
- Record
GHSA-fm7f-hwmh-f544- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2023 is a high vulnerability (CVSS 7.2) in Secustick Usb Flash Drive, published April 13, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. No source names a fixed version.