CVE-2020-13799 Security feature bypass in n/a

Medium 6.8 Published 18 Nov 2020 Updated 4 Aug 2024

Attackers can manipulate Replay Protected Memory Block state in eMMC, UFS, and NVMe storage devices, bypassing security mechanisms intended to protect trusted firmware.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-13799?

CVE-2020-13799 is a medium-severity vulnerability in n/a, published on 18 Nov 2020. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Western Digital has identified a security vulnerability in the Replay Protected Memory Block (RPMB) protocol as specified in multiple standards for storage device interfaces, including all versions of eMMC, UFS, and NVMe. The RPMB protocol is specified by industry standards bodies and is implemented by storage devices from multiple vendors to assist host systems in securing trusted firmware. Several scenarios have been identified in which the RPMB state may be affected by an attacker without the knowledge of the trusted component that uses the RPMB feature.

Weakness: CWE-294

Which versions are affected by CVE-2020-13799?

It affects 4 products.

Products include Trustedfirmware Op-Tee, Westerndigital Inand Cl Em132 Firmware, Westerndigital Inand Ix Em132 Firmware, Westerndigital Inand Ix Em132 Xi Firmware.

How do I fix CVE-2020-13799?

No fix has been published for CVE-2020-13799 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-13799 being exploited?

There is no known exploitation of CVE-2020-13799 in the wild and no public exploit code.

Sources

Also known as GHSA-w82c-75f7-qr29.