Advisory ID: SYSS-2022-006
\nProduct: Store ‘n’ Go Secure Portable HDD
\nManufacturer: Verbatim
\nAffected Version(s): GD25LK01-3637-C VER4.0
\nTested Version(s): GD25LK01-3637-C VER4.0
\nVulnerability Type: Use of a Cryptographic Primitive with a Risky
\nImplementation (CWE-1240)
\nRisk Level: Low
\nSolution Status: Open
\nManufacturer Notification: 2022-01-31
\nSolution Date: –
\nPublic Disclosure: 2022-06-08
\nCVE Reference: CVE-2022-28382
\nAuthor of Advisory: Matthias Deeg (SySS GmbH)<\/p>\n
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<\/p>\n
Overview:<\/p>\n
The Verbatim Store ‘n’ Go Secure Portable HDD is a portable USB drive
\nwith AES 256-bit hardware encryption and a built-in keypad for passcode
\nentry.<\/p>\n
The manufacturer describes the product as follows:<\/p>\n
“The AES 256-bit Hardware Encryption seamlessly encrypts all data on the
\ndrive in real-time with a built-in keypad for password input. The SSD
\ndoes not store passwords in the computer or system’s volatile memory
\nmaking it far more secure than software encryption. Also, if it falls
\ninto the wrong hands, the SSD will lock and require re-formatting after
\n20 failed password attempts.”[1]\n
Due to the use of an insecure encryption AES mode (Electronic Codebook),
\nan attacker may be able to extract information even from
\nencrypted data, for example by observing repeating byte patterns.<\/p>\n
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<\/p>\n
Vulnerability Details:<\/p>\n
When analyzing the external SSD Verbatim Store ‘n’ Go Secure Portable
\nHDD, Matthias Deeg found out that the firmware of the USB-to-SATA bridge
\ncontroller INIC-3637EN uses AES-256 with the ECB (Electronic Codebook)
\nmode.<\/p>\n
This operation mode of block ciphers like AES encrypts identical
\nplaintext data, in this case blocks of 16 bytes, always to identical
\nciphertext data.<\/p>\n
For some data, for instance bitmap images, the lack of the cryptographic
\nproperty called diffusion concerning the ECB mode can leak sensitive
\ninformation even in encrypted data.<\/p>\n
One famous example for this is an ECB-encrypted image of the TUX
\npenguin, which, for instance, is referenced in the Wikipedia article
\nabout block cipher modes of operation[2] to illustrate this issue.<\/p>\n
Thus, the use of the ECB operation mode can put the confidentiality of
\nspecific information at risk, even in an encrypted form.<\/p>\n
Additionally, in attack scenarios where an attacker has short-time
\nphysical access to a Verbatim Store ‘n’ Go Portable Secure HDD, and
\nlater returns it to its legitimate owner, the attacker may be able to
\ncompromise the integrity of the stored data by exploiting the fact that
\nthe same 16-byte plaintext blocks result in the same 16-byte ciphertext
\nblocks, by replacing specific encrypted 16-byte blocks with other ones.<\/p>\n
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<\/p>\n
Proof of Concept (PoC):<\/p>\n
The same 16 byte long plaintext pattern was written several times to an
\nunlocked Verbatim Store ‘n’ Go Secure Portable HDD.<\/p>\n
When the SSD was then read using another SSD enclosure, the same 16
\nbyte long ciphertext pattern could be observed for the corresponding
\nplaintext data.<\/p>\n
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<\/p>\n
Solution:<\/p>\n
SySS GmbH is not aware of a solution for the described security issue.<\/p>\n
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<\/p>\n
Disclosure Timeline:<\/p>\n
2022-01-31: Vulnerability reported to manufacturer
\n2022-02-11: Vulnerability reported to manufacturer again
\n2022-03-07: Vulnerability reported to manufacturer again
\n2022-06-08: Public release of security advisory<\/p>\n
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<\/p>\n
References:<\/p>\n
[1] Product website for Verbatim Store ‘n’ Go Secure Portable HDD<\/p>\n
https:\/\/www.verbatim-europe.co.uk\/en\/prod\/store-n-go-portable-ssd-with-keypad-access-256gb-53402\/
\n[2] Wikipedia article about block cipher mode of operation<\/p>\n
https:\/\/en.wikipedia.org\/wiki\/Block_cipher_mode_of_operation#Electronic_codebook_(ECB)
\n[3] SySS Security Advisory SYSS-2022-006<\/p>\n
https:\/\/www.syss.de\/fileadmin\/dokumente\/Publikationen\/Advisories\/SYSS-2022-006.txt
\n[4] SySS GmbH, SySS Responsible Disclosure Policy
\nhttps:\/\/www.syss.de\/en\/responsible-disclosure-policy<\/p>\n
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<\/p>\n
Credits:<\/p>\n
This security vulnerability was found by Matthias Deeg of SySS GmbH.<\/p>\n
E-Mail: matthias.deeg (at) syss.de
\nPublic Key:
\nhttps:\/\/www.syss.de\/fileadmin\/dokumente\/Materialien\/PGPKeys\/Matthias_Deeg.asc
\nKey fingerprint = D1F0 A035 F06C E675 CDB9 0514 D9A4 BF6A 34AD 4DAB<\/p>\n
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<\/p>\n
Disclaimer:<\/p>\n
The information provided in this security advisory is provided “as is”
\nand without warranty of any kind. Details of this security advisory may
\nbe updated in order to provide as accurate information as possible. The
\nlatest version of this security advisory is available on the SySS website.<\/p>\n
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<\/p>\n
Copyright:<\/p>\n
Creative Commons – Attribution (by) – Version 3.0
\nURL: http:\/\/creativecommons.org\/licenses\/by\/3.0\/deed.en<\/p>\n","protected":false},"excerpt":{"rendered":"
Advisory ID: SYSS-2022-006 Product: Store ‘n’ Go Secure Portable HDD Manufacturer: Verbatim Affected Version(s): GD25LK01-3637-C VER4.0 Tested Version(s): GD25LK01-3637-C VER4.0 Vulnerability Type: Use of a Cryptographic Primitive with a Risky Implementation (CWE-1240) Risk Level: Low Solution Status: Open Manufacturer Notification: 2022-01-31 Solution Date: – Public Disclosure: 2022-06-08 CVE Reference: CVE-2022-28382 Author of Advisory: Matthias Deeg …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-25947","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/25947","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=25947"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/25947\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=25947"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=25947"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=25947"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}