CVE-2015-7268

Severity CVSS v4.0:

Pending analysis

Type:

CWE-254 Security Features

Publication date:

27/11/2017

Last modified:

20/04/2025

Description

Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when used on Windows and operating in Opal mode on Lenovo ThinkPad T440s laptops with BIOS 2.32 or ThinkPad W541 laptops with BIOS 2.21, or in Opal or eDrive mode on Dell Latitude E6410 laptops with BIOS A16 or Latitude E6430 laptops with BIOS A16, allow physically proximate attackers to bypass self-encrypting drive (SED) protection by triggering a soft reset and booting from an alternative OS, aka a "Forced Restart Attack."

Impact

Vector 3.x

CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS v3.1 Severity and Metrics:

Base Score: 4.20 MEDIUM
Vector: CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector (AV): Physical
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope (S): Unchanged
Confidentiality (C): High
Integrity (I): None
Availability (A): None

Base Score 3.x

4.20

Severity 3.x

MEDIUM

Vector 2.0

AV:L/AC:M/Au:N/C:P/I:N/A:N CVSS v2.0 Severity and Metrics:

Base Score: 1.90 LOW
Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N

Attack Vector (AV): Local
Attack Complexity (AC): Medium
Authentication (Au): None
Confidentiality (C): Physical
Integrity (I): None
Availability (A): None

Base Score 2.0

1.90

Severity 2.0

LOW

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:o:samsung:850_pro_firmware:-:::::::*
cpe:2.3:h:samsung:850_pro:-:::::::*
cpe:2.3:o:samsung:pm851_firmware:-:::::::*
cpe:2.3:h:samsung:pm851:-:::::::*
cpe:2.3:o:seagate:st500lt015_firmware:-:::::::*
cpe:2.3:h:seagate:st500lt015:-:::::::*
cpe:2.3:o:seagate:st500lt025_firmware:-:::::::*
cpe:2.3:h:seagate:st500lt025:-:::::::*

To consult the complete list of CPE names with products and versions, see this page

CPE	From	Up to
cpe:2.3:o:samsung:850_pro_firmware:-:::::::*
cpe:2.3:h:samsung:850_pro:-:::::::*
cpe:2.3:o:samsung:pm851_firmware:-:::::::*
cpe:2.3:h:samsung:pm851:-:::::::*
cpe:2.3:o:seagate:st500lt015_firmware:-:::::::*
cpe:2.3:h:seagate:st500lt015:-:::::::*
cpe:2.3:o:seagate:st500lt025_firmware:-:::::::*
cpe:2.3:h:seagate:st500lt025:-:::::::*

CVE-2015-7268

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools