What’s Vulnerable › Vulnerabilities

CVE-2010-0223

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-01-07 · updated 2026-06-16
• Weakness: CWE-264

Description

Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time.

Affected products

• Kingston Datatraveler Blackbox: all versions
• Kingston Datatraveler Elite: all versions
• Kingston Datatraveler Secure: all versions

References

• http://www.kingston.com/driveupdate/
• http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf
• http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9
• http://www.vupen.com/english/advisories/2010/0080
• https://www.ironkey.com/usb-flash-drive-flaw-exposed
• http://www.kingston.com/driveupdate/
• http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf
• http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9
• http://www.vupen.com/english/advisories/2010/0080
• https://www.ironkey.com/usb-flash-drive-flaw-exposed

Get alerted when CVE-2010-0223 or the next vulnerability affects your stack