CVE-2010-0227
Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives validate passwords...
Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.
Exploit likelihood
What each source reports
NVD Score used
Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.
- Record
CVE-2010-0227- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.
- Record
CVE-2010-0227- Updated
- 2026-11-02
EUVDEUVD-2010-0258 No score
Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.
- Record
EUVD-2010-0258- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r223-9cmx-jch2 No score
Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives validate passwords...
Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.
- Record
GHSA-r223-9cmx-jch2- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0227 is a medium vulnerability (CVSS 4.6) in Verbatim Corporate Secure, published January 7, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. No source names a fixed version.
References
securitytracker.com/id?1023409
it.slashdot.org/story/10/01/05/1734242
h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html
verbatim.com/security/security-update.cfm
blogs.zdnet.com/hardware?p=6655
ironkey.com/usb-flash-drive-flaw-exposed
nvd.nist.gov/vuln/detail/CVE-2010-0227
github.com/advisories/GHSA-r223-9cmx-jch2