CVE-2019-10706: Westerndigital Sandisk x300 SD7SB6S-128g Firmware

Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device, and if extracted could be used to install arbitrary firmware to other devices.

Affected products

  • Westerndigital Sandisk x300 SD7SB6S-128g Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SB6S-256g Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SB7S-010t Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SB7S-512g Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SF6S-128g Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SF6S-256g Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SF6S-512g Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SN6S-128g Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SN6S-256g Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SN6S-512g Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7SB3Q-064g Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7SN3Q-064g Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7UB2Q-010t Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7UB2Q-512g Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7UB3Q-128g Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7UB3Q-256g Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7UN3Q-128g Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7UN3Q-256g Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7UN3Q-512g Firmware: affected versions not specified
  • Westerndigital Sandisk x400 SD8SB8U-128g-1122 Firmware: affected versions not specified
  • Westerndigital Sandisk x400 SD8SB8U-128g Firmware: affected versions not specified
  • Westerndigital Sandisk x400 SD8SB8U-1t00-1122 Firmware: affected versions not specified
  • Westerndigital Sandisk x400 SD8SB8U-1t00 Firmware: affected versions not specified
  • Westerndigital Sandisk x400 SD8SB8U-256g-1122 Firmware: affected versions not specified
  • Westerndigital Sandisk x400 SD8SB8U-256g Firmware: affected versions not specified
  • and 34 more

Published 2020-03-10. Last modified 2026-06-17.