Breaking News

Qualcomm Redefining Wireless Audio with Launch of Qualcomm Snapdragon Sound ASUS announces the ROG Strix, TUF Gaming and Dual AMD Radeon RX 6700 XT graphics card series Leica announces The APO-SUMMICRON-M 35 f/2 ASPH GIGABYTE Launches Radeon RX 6700 XT series graphics cards Samsung Announces Galaxy XCover 5, the Newest Durable and Advanced Smartphone Built for Tough Environments

logo

  • Share Us
    • Facebook
    • Twitter
  • Home
  • Home
  • News
  • Reviews
  • Forum
  • Legacy
  • About
    • Submit News

    • Contact Us
    • Privacy

    • Promotion
    • Advertise

    • RSS Feed
    • Site Map

Search form

Researchers Discover Security Flaws in Samsung and Crucial SSDs

Researchers Discover Security Flaws in Samsung and Crucial SSDs

PC components Nov 7,2018 0

Researchers at Radboud University in the Netherlands have discovered that popular SSDs featuring self-encrypting technology do not provide the expected level of data protection.

A malicious expert with direct physical access to widely sold storage devices can bypass existing protection mechanisms and access the data without knowing the user-chosen password, the researchers said.

These flaws exist in the encryption mechanism of several types of solid state drives of two major manufacturers, namely Samsung and Crucial. The vulnerabilities occur both in internal storage devices (in laptops, tablets and computers) and in external storage devices (connected via a USB cable). The storage devices affected include popular models that are currently widely available.

The researchers say that if sensitive data needs to be protected, it is in advisable to use software encryption and not rely solely on hardware encryption. On computers running Windows, BitLocker provides software encryption, and data may not be secure.

The researchers identified these security issues using public information and SSDs. Although it is quite difficult to discover these problems from scratch, once the nature of the issues is known, there is a risk that the exploitation of these flaws will be automated by others, making abuse easier. The researchers at Radboud University of course will not release such an exploitation tool.

The models for which vulnerabilities have actually been demonstrated in practice are:

  • Crucial (Micron) MX100, MX200 and MX300 internal disks;
  • Samsung T3 and T5 USB external disks;
  • Samsung 840 EVO and 850 EVO internal disks.

On computers running Windows, a software component called BitLocker handles the encryption of the computer's data. In Windows, the kind of encryption that BitLocker uses (i.e. hardware encryption or software encryption) is set via the Group Policy. If available, standard hardware encryption is used. For the affected models, the default setting must be changed so that only software encryption is used. This change does not solve the problem immediately, because it does not re-encrypt existing data. Only a completely new installation, including reformatting the internal drive, will enforce software encryption. As an alternative to reinstallation, the VeraCrypt software package can be used.

Both manufacturers were informed of this security problem in April 2018 by the National Cyber Security Centre (NCSC) of the Netherlands. The university provided details to both manufacturers to enable them to fix their product. The manufacturers will provide detailed information to their customers about the affected models.

For non-portable Samsung SSDs, Samsung recommends installing encryption software (freeware available online). For portable SSDs, the company recommends updating the firmware on the SSDs.

There is no official response from Micron/ Crucial yet.

Tags: SSDsSAMSUNGCrucial Technologyencryption
Previous Post
Nokia Signs EUR 2 billion Frame Agreements With Chinese Operators
Next Post
LG G7 Fit Smartphone Brings Features From the G Series to a Wider Audience

Related Posts

  • Samsung Announces Galaxy XCover 5, the Newest Durable and Advanced Smartphone Built for Tough Environments

  • Samsung Unboxes its 2021 lineup of MICRO LED, Samsung Neo QLED

  • Crucial launch 500GB & 4TB X6 Portable SSDs

  • Intel Launches SSD for Everyday Computing, Mainstream Gaming

  • One UI 3 Brings Seamless Continuity and Intuitive Interactions to the Galaxy Z Fold2

  • Effective Noise Canceling and Impressive Sound Quality Put the ‘Pro’ in Galaxy Buds Pro

  • Samsung Begins Mass Production of Data Center SSD Customized for Hyperscale Environments

  • Samsung Introduces 1.4μm 50Mp ISOCELL GN2 with Faster and More True-to-Life Auto-Focusing

Latest News

Qualcomm Redefining Wireless Audio with Launch of Qualcomm Snapdragon Sound
Smartphones

Qualcomm Redefining Wireless Audio with Launch of Qualcomm Snapdragon Sound

ASUS announces the ROG Strix, TUF Gaming and Dual AMD Radeon RX 6700 XT graphics card series
GPUs

ASUS announces the ROG Strix, TUF Gaming and Dual AMD Radeon RX 6700 XT graphics card series

Leica announces The APO-SUMMICRON-M 35 f/2 ASPH
Cameras

Leica announces The APO-SUMMICRON-M 35 f/2 ASPH

GIGABYTE Launches Radeon RX 6700 XT series graphics cards
GPUs

GIGABYTE Launches Radeon RX 6700 XT series graphics cards

Samsung Announces Galaxy XCover 5, the Newest Durable and Advanced Smartphone Built for Tough Environments
Smartphones

Samsung Announces Galaxy XCover 5, the Newest Durable and Advanced Smartphone Built for Tough Environments

Popular Reviews

CeBIT 2005

CeBIT 2005

Zidoo Z9S 4K Media Player review

Zidoo Z9S 4K Media Player review

CeBIT 2006

CeBIT 2006

LiteOn iHBS112 review

LiteOn iHBS112 review

Club3D HD3850

Club3D HD3850

Crucial P1 NVMe 1TB SSD review

Crucial P1 NVMe 1TB SSD review

Toshiba Exceria M303 64GB and M501 Exceria Pro 64GB MicroSDXC review

Toshiba Exceria M303 64GB and M501 Exceria Pro 64GB MicroSDXC review

Hitachi DZ-MV100A DVD Camcorder

Hitachi DZ-MV100A DVD Camcorder

  • Home
  • News
  • Reviews
  • Forum
  • Legacy
  • About
    • Submit News

    • Contact Us
    • Privacy

    • Promotion
    • Advertise

    • RSS Feed
    • Site Map
  • About
  • Privacy
  • Contact Us
  • Promotional Opportunities @ CdrInfo.com
  • Advertise on out site
  • Submit your News to our site
  • RSS Feed