CVE-2019-11885

MEDIUM

eyeDisk - Insufficiently Protected Credentials via Cleartext Password Transmission

Title source: llm
STIX 2.1

Description

eyeDisk implements the unlock feature by sending a cleartext password. The password can be discovered by sniffing USB traffic or by sending a 06 05 52 41 01 b0 00 00 00 00 00 00 SCSI command.

References (1)

Core 1
Core References

Scores

CVSS v3 6.8
EPSS 0.0043
EPSS Percentile 34.1%
Attack Vector PHYSICAL
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-522
Status published
Products (1)
eye-disk/eyedisk
Published May 12, 2019
Tracked Since Feb 18, 2026