CVE-2007-2023 in USB flash drive

Summary

USB20.dll in Secustick USB flash drive decouples the authorization and file access routines, which allows local users to bypass authentication requirements by altering the return value of the VerifyPassWord function.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 04/13/2007
• Disclosure: 04/13/2007
• Moderation: VulDB entry created
• Entries: 1: VDB-36170
• CPE: ready
• CWE: CWE-252 (Unconfirmed)
• CVSS: 8.4
• EPSS: 0.00070
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-2023
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-2023
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-2023/