What’s Vulnerable › Vulnerabilities

CVE-2019-10705

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-03-10 · updated 2026-06-17
• Weakness: CWE-522

Description

Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials.

Affected products

• Westerndigital Sandisk X600 Sd9Sb8W-128G Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Sb8W-1T00 Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Sb8W-256G Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Sb8W-2T00 Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Sb8W-512G Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Sn8W-128G Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Sn8W-1T00 Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Sn8W-256G Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Sn8W-2T00 Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Sn8W-512G Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Tb8W-128G Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Tb8W-1T00 Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Tb8W-256G Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Tb8W-2T00 Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Tb8W-512G Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Tn8W-128G Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Tn8W-1T00 Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Tn8W-256G Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Tn8W-2T00 Firmware: before x6112100 — fixed in x6112100
• Westerndigital Sandisk X600 Sd9Tn8W-512G Firmware: before x6112100 — fixed in x6112100

How to fix

Upgrade to a fixed version: Westerndigital Sandisk X600 Sd9Sb8W-128G Firmware x6112100; Westerndigital Sandisk X600 Sd9Sb8W-1T00 Firmware x6112100; Westerndigital Sandisk X600 Sd9Sb8W-256G Firmware x6112100; Westerndigital Sandisk X600 Sd9Sb8W-2T00 Firmware x6112100; Westerndigital Sandisk X600 Sd9Sb8W-512G Firmware x6112100; Westerndigital Sandisk X600 Sd9Sn8W-128G Firmware x6112100; Westerndigital Sandisk X600 Sd9Sn8W-1T00 Firmware x6112100; Westerndigital Sandisk X600 Sd9Sn8W-256G Firmware x6112100; Westerndigital Sandisk X600 Sd9Sn8W-2T00 Firmware x6112100; Westerndigital Sandisk X600 Sd9Sn8W-512G Firmware x6112100; Westerndigital Sandisk X600 Sd9Tb8W-128G Firmware x6112100; Westerndigital Sandisk X600 Sd9Tb8W-1T00 Firmware x6112100. Check the vendor advisory for mitigations.

References

• https://support.wdc.com/cat_products.aspx?ID=6&lang=en
• https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd
• https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-ssd
• https://support.wdc.com/cat_products.aspx?ID=6&lang=en
• https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd
• https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-ssd

Get alerted when CVE-2019-10705 or the next vulnerability affects your stack