CVE-2010-0224
SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host...
SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.
Exploit likelihood
What each source reports
NVD Score used
SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.
- Record
CVE-2010-0224- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.
- Record
CVE-2010-0224- Updated
- 2026-11-02
EUVDEUVD-2010-0255 No score
SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.
- Record
EUVD-2010-0255- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9vwm-p764-2vh2 No score
SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host...
SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.
- Record
GHSA-9vwm-p764-2vh2- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0224 is a medium vulnerability (CVSS 4.6) in Sandisk Cruzer Enterprise Usb, published January 7, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. No source names a fixed version.
References
syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9
securitytracker.com/id?1023408
sandisk.com/business-solutions/enterprise/technical-support/security-bulletin-december-2009
it.slashdot.org/story/10/01/05/1734242
h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html
blogs.zdnet.com/hardware?p=6655
Show 8 moreShow less
vupen.com/english/advisories/2010/0078
securityfocus.com/bid/37677
exchange.xforce.ibmcloud.com/vulnerabilities/55475
ironkey.com/usb-flash-drive-flaw-exposed
nvd.nist.gov/vuln/detail/CVE-2010-0224
github.com/advisories/GHSA-9vwm-p764-2vh2