What’s Vulnerable › Vulnerabilities

CVE-2019-11686

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-03-10 · updated 2026-06-17
• Weakness: CWE-522

Description

Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters (such as data encryption keys) to remain on the drive media after their intended erasure.

Affected products

• Westerndigital Sandisk X300 Sd7Sb6S-128G Firmware: all versions
• Westerndigital Sandisk X300 Sd7Sb6S-256G Firmware: all versions
• Westerndigital Sandisk X300 Sd7Sb7S-010T Firmware: all versions
• Westerndigital Sandisk X300 Sd7Sb7S-512G Firmware: all versions
• Westerndigital Sandisk X300 Sd7Sf6S-128G Firmware: all versions
• Westerndigital Sandisk X300 Sd7Sf6S-256G Firmware: all versions
• Westerndigital Sandisk X300 Sd7Sf6S-512G Firmware: all versions
• Westerndigital Sandisk X300 Sd7Sn6S-128G Firmware: all versions
• Westerndigital Sandisk X300 Sd7Sn6S-256G Firmware: all versions
• Westerndigital Sandisk X300 Sd7Sn6S-512G Firmware: all versions
• Westerndigital Sandisk X300S Sd7Sb3Q-064G Firmware: all versions
• Westerndigital Sandisk X300S Sd7Sn3Q-064G Firmware: all versions
• Westerndigital Sandisk X300S Sd7Ub2Q-010T Firmware: all versions
• Westerndigital Sandisk X300S Sd7Ub2Q-512G Firmware: all versions
• Westerndigital Sandisk X300S Sd7Ub3Q-128G Firmware: all versions
• Westerndigital Sandisk X300S Sd7Ub3Q-256G Firmware: all versions
• Westerndigital Sandisk X300S Sd7Un3Q-128G Firmware: all versions
• Westerndigital Sandisk X300S Sd7Un3Q-256G Firmware: all versions
• Westerndigital Sandisk X300S Sd7Un3Q-512G Firmware: all versions
• Westerndigital Sandisk X400 Sd8Sb8U-128G-1122 Firmware: all versions
• Westerndigital Sandisk X400 Sd8Sb8U-128G Firmware: all versions
• Westerndigital Sandisk X400 Sd8Sb8U-1T00-1122 Firmware: all versions
• Westerndigital Sandisk X400 Sd8Sb8U-1T00 Firmware: all versions
• Westerndigital Sandisk X400 Sd8Sb8U-256G-1122 Firmware: all versions
• Westerndigital Sandisk X400 Sd8Sb8U-256G Firmware: all versions
• Westerndigital Sandisk X400 Sd8Sb8U-512G-1122 Firmware: all versions
• Westerndigital Sandisk X400 Sd8Sb8U-512G Firmware: all versions
• Westerndigital Sandisk X400 Sd8Sn8U-128G-1122 Firmware: all versions
• Westerndigital Sandisk X400 Sd8Sn8U-128G Firmware: all versions
• Westerndigital Sandisk X400 Sd8Sn8U-1T00-1122 Firmware: all versions

How to fix

Upgrade to a fixed version: Westerndigital Sandisk X600 Sd9Sb8W-128G Firmware x6112100; Westerndigital Sandisk X600 Sd9Sb8W-1T00 Firmware x6112100; Westerndigital Sandisk X600 Sd9Sb8W-256G Firmware x6112100; Westerndigital Sandisk X600 Sd9Sb8W-2T00 Firmware x6112100; Westerndigital Sandisk X600 Sd9Sb8W-512G Firmware x6112100; Westerndigital Sandisk X600 Sd9Sn8W-128G Firmware x6112100; Westerndigital Sandisk X600 Sd9Sn8W-1T00 Firmware x6112100; Westerndigital Sandisk X600 Sd9Sn8W-256G Firmware x6112100; Westerndigital Sandisk X600 Sd9Sn8W-2T00 Firmware x6112100; Westerndigital Sandisk X600 Sd9Sn8W-512G Firmware x6112100; Westerndigital Sandisk X600 Sd9Tb8W-128G Firmware x6112100; Westerndigital Sandisk X600 Sd9Tb8W-1T00 Firmware x6112100. Check the vendor advisory for mitigations.

References

• https://support.wdc.com/downloads.aspx?g=907&lang=en
• https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd
• https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-s
• https://support.wdc.com/downloads.aspx?g=907&lang=en
• https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd
• https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-s

Get alerted when CVE-2019-11686 or the next vulnerability affects your stack